I say 1500 because otherwise it would just get too hard to meet the requierments

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>