Add a safety limit to the number of unicode characters we fetch

(followup to r84635, suggested by Dave Malcolm).