Accessor::getCollection() max count injection protection