Title: Redirect loop solution – disable "Modsecurity" Last modified: August 31, 2016 --- # Redirect loop solution – disable "Modsecurity" * Resolved Anonymous User 50911 * (@anonymized-50911) * [10 years, 4 months ago](https://wordpress.org/support/topic/redirect-loop-solution-disable-modsecurity/) * I stumbled across this redirect loop problem today afrer upgrading to 4.4.1 and soon found that disabling “Modsecurity” fixed problems. * My problem was specifically /wp-admin loop, I was able to access admin pages with full url like /widgets.php and index.php but not just /wp-admin. * I hope this issue is solved in future versions of WP because disabling Modsecurity cannot be long-term solution… * Apache Version 2.4.16 PHP Version 5.5.30 MySQL Version 10.1.6-MariaDB-cll-lve Viewing 4 replies - 1 through 4 (of 4 total) * [MACscr](https://wordpress.org/support/users/macscr/) * (@macscr) * [10 years, 4 months ago](https://wordpress.org/support/topic/redirect-loop-solution-disable-modsecurity/#post-6918377) * oops * [MACscr](https://wordpress.org/support/users/macscr/) * (@macscr) * [10 years, 4 months ago](https://wordpress.org/support/topic/redirect-loop-solution-disable-modsecurity/#post-6918378) * I am having the same issue. * `[Thu Jan 07 16:07:45.128256 2016] [:error] [pid 93076:tid 47808259901760] [client xxxxxx] ModSecurity: Access denied with code 403 (phase 4). Pattern match "(? i)(String\\\\.fromCharCode\\\\(.*?){4,}" at RESPONSE_BODY. [file "/usr/local/ apache/conf/modsec_vendor_configs/comodo_apache/14_Outgoing_FilterGen.conf"] [ line "28"] [id "214560"] [rev "1"] [msg "COMODO WAF: Potential Obfuscated Javascript in Output - Excessive fromCharCode"] [data "Matched Data: String.fromCharCode( 55356,56806,55356,56826),0,0),d.toDataURL().length>3e3):\\x22diversity\\x22== =a?(e.fillText(String.fromCharCode(55356,57221),0,0),c=e.getImageData(16,16,1,1). data.toString(),e.fillText(String.fromCharCode(55356,57221,55356,57343),0,0), c!==e.getImageData(16,16,1,1).data.toString()):(\\x22simple\\x22===a?e.fillText( String.fromCharCode( found within RESPONSE_BODY: \\x0a