A website hosted in Plesk fails to load: ModSecurity: Response body too large

Started by Suhitha, Oct 17, 2025, 07:35 AM

Previous topic - Next topic

Suhitha

Applicable to:

  • Plesk for Linux


Symptoms

  • A website is not loading with the following error message in a web browser:
500
Internal Server Error

  • The following messages are logged in Domains > example.com > Logs:
[error] [client 203.0.113.2] ModSecurity: Output filter: Response body too large (over limit of 524288, total not specified). [hostname "www.example.com"] [uri "/index.php"] ...


Cause

The website has exceeded default ModSecurity SecResponseBodyLimit parameter (1 MB).


Resolution

Adjusting 'SecResponseBodyLimit' for one domain

1.Log in to Plesk.

2.Go to Domains > example.com > Hosting & DNS > Apache & nginx Settings.

3.Add the line below to Additional directives for HTTP and Additional directives for HTTPS fields to increase SecResponseBodyLimit to 256 MB (or define your own value):

<IfModule mod_security2.c>
    SecResponseBodyLimit 268435456
</IfModule>
4.Apply the changes.