Add an Option to Skip Body Inspections

[thekief]

I have a rather rare use-case, where sometimes large POST requests are made to ModSecurity protected endpoints. The sent data itself is encrypted and cannot be inspected. As ModSecurity buffers the whole requests, this leads to quite a big memory consumption, subsequently the container is killed, if it consumes too much memory.

To address this issue, we developed a patch that allows on a per-location basis to skip the body inspection, while keeping the rest of the ModSecurity checks. I'd like to open a pull request to evaluate, if that patch fits into the official source.

[airween]

Hi @thekief,

if there isn't any useful solution, then we can try to check the PR.

What if you put a location in Nginx's config where you turn off modsecurity?