When enabling or disabling listeners from the main development listener list page, a security error happens. You have to go into the listener itself to enable or disable it.
That explains why I've been hitting it.For each event listener there is two inputs (one hidden, and then the checkbox itself). Then there is the _xfToken (which if missing causes the security error). If you have 500 or so code event listeners then you will exceed the limit.