Problem Parameters:
The user’s host has ModSecurity CRS setup to check the Source Code of website pages.
Rank Math > General Settings > Edit .htaccess option loads htaccess code in the Source Code of the General Settings page.
The root htaccess file contains BPS security code that ModSecurity CRS falsely detects as malicious.
User’s will see a 403 error when trying to save their General Settings options.
In the BPS and BPS Pro plugins I have created encryption to bypass/evade ModSecurity CRS when saving htaccess code that ModSecurity CRS falsely detects as malicious.
Recommendations to Rank Math: Either use the encryption method that I am using in the BPS plugin to evade/bypass ModSecurity CRS or change the Edit .htaccess option to only load htaccess code independently instead of on page load when the General Settings option page is loaded.
.
