title: Does MaxHttpCollectionKeys setting come with .net 4?
body: <p>In 2011 Microsoft released <a href="http://support.microsoft.com/kb/2661403" rel="nofollow">a security patch</a> to prevent a Denial of Service vulnerability that involved an attacker overwhelming a request with too many keys (the science of which is beyond the remit of this question).</p>
  
  <p>The patch limited the number of keys to 1000 but that default could be overwritten by adding a setting to your website's config file</p>
  
  <pre><code>&lt;configuration&gt;
    &lt;appSettings&gt;
            &lt;add key="aspnet:MaxHttpCollectionKeys" value="2000" /&gt;
    &lt;/appSettings&gt;
  &lt;/configuration&gt;
  </code></pre>
  
  <p>Lets say for whatever crazy reason we didn't install that patch while we were on .Net 3.5. 
  Now we've upgraded to .Net4, is that patch included within that version of .Net?</p>
  
  <p>Thanks in advance!</p>