Pages

Monday, 30 January 2012

Microsoft Security Bulletin MS11-100 and MaxHttpCollectionKeys

On 29th December 2011, Microsoft released a patch to fix vulnerabilities in the .NET Framework - update MS11-100 http://support.microsoft.com/kb/2638420


One unfortunate side effect of this update is the limiting of the MaxHttpCollectionKeys value, which causes problems with HTTP submissions with lots of form elements. I believe it is now limited to 500, but I cannot find any details confirming this. 


To increase this limit for an application that needs to submit more than 500 elements, add the following key to the webconfig file in your web site or web application:



<appSettings>
    <add key="aspnet:MaxHttpCollectionKeys" value="1000" />
</appSettings>

I hope this helps someone, as I had to implement this as a fix quite recently for a web application.

No comments:

Post a Comment