I have a rather rare use-case, where sometimes large POST requests are made to ModSecurity protected endpoints. The sent data itself is encrypted and cannot be inspected. As ModSecurity buffers the whole requests, this leads to quite a big memory consumption, subsequently the container is killed, if it consumes too much memory.

To address this issue, we developed a patch that allows on a per-location basis to skip the body inspection, while keeping the rest of the ModSecurity checks. I'd like to open a pull request to evaluate, if that patch fits into the official source.