• Add the following to .htaccess:
    <IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterScanPOST Off
    </IfModule>
  • If  this is coming from linking external website (here facebook is taken as example). It is resolved by putting this in mod_security config file:

    <IfModule mod_security.c>
    SecRule SERVER_NAME “facebook\.com$” phase:1,nolog,allow,ctl:ruleEngine=off
    </IfModule>