Thanks for your feedback. This is planned as part of global waf configurable parameters.Joakim commented
We desperately need to be able to configure the limit of the message body to be bigger than 128KB (131072). We run off-the-shelf software that cannot be changed to respect this limit. One exaplle is DotNetNuke/Evoq, where the Admin interface use a lot of XHR requests which break the size limit.Joakim commented
As far as I understand, this is now implemented, but the maximum limit is 128KB. This is still to low for some applications. We have COTS software that generetes POST request with large _VIEWSTATE that gets blocked with 413 ModSecurity Action. Please raise the max value.