I'm having the same problem with file uploads not showing a progress bar. From what I can see the POST data is being buffered until the upload is complete. I have disabled 'extra web security' 3 hours ago, and it hasn't fixed this problem. I've also tried adding to .htaccess:
But that gives internal server errors.
Are there other solutions to this problem? I'm pretty sure this was working as recently as a few weeks ago. Do I need to disable FastCGI too?
Edit: For what it's worth, I found the solution to my specific problem. I switched to a VPS and then followed the instructions here to edit the Apache configuration. I edited (as root) the file:
And changed the line:
Then restarted apache:
sudo /etc/init.d/httpd2 restart apache2-<PsServerName>
This no longer buffered the POST data to my Perl CGI script so I would get the progress bar during uploads as expected. My guess is that since my uploads were over https, the normal suggestions mentioned earlier didn't work for me.
Also, there may be other implications behind doing it this way, but for now it's working so I can't complain. And I can easily turn it back to 'On' and I stop getting the progress bar so I'm convinced this is the source of the problem. There may be a finer way to turn off the body access for just file uploads or for just that script, and maybe a modsecurity2 guru could post those instructions, but for now, this is working for me.