비회원 바로구매관련 406 Error

#############################
# 5. XSS 공격 방지
SecFilterSelective ARGS "alert[[:space:]]*\(" "msg:'XSS attack'"
SecFilterSelective ARGS "&#[[0-9a-fA-F]]{2}" "msg:'XSS attack'"
SecFilterSelective ARGS "eval[[:space:]]*\(" "msg:'XSS attack'"
SecFilterSelective ARGS "onKeyUp" "msg:'XSS attack'"
SecFilterSelective ARGS "\x5cx[0-9a-fA-F]{2}" "msg:'XSS attack'"
SecFilterSelective ARGS "fromCharCode" "msg:'XSS attack'"
SecFilterSelective ARGS "&\{.+\}" "msg:'XSS attack'"
SecFilterSelective ARGS "<script" "msg:'XSS attack'"
SecFilterSelective ARGS "vbscript:" "msg:'XSS attack'"
SecFilterSelective ARGS "expression[[:space:]]*\(" "msg:'XSS attack'"
SecFilterSelective ARGS "url[[:space:]]*\(" "msg:'XSS attack'"
SecFilterSelective ARGS "innerHTML" "msg:'XSS attack'"
SecFilterSelective ARGS "document\.body" "msg:'XSS attack'"
SecFilterSelective ARGS "document\.cookie" "msg:'XSS attack'"
SecFilterSelective ARGS "document\.location" "msg:'XSS attack'"
SecFilterSelective ARGS "document\.write" "msg:'XSS attack'"
SecFilterSelective ARGS "style[[:space:]]*=" "msg:'XSS attack'"
SecFilterSelective ARGS "dynsrc" "msg:'XSS attack'"
SecFilterSelective ARGS_VALUES "jsessionid" "msg:'XSS attack'"
SecFilterSelective ARGS_VALUES "phpsessid" "msg:'XSS attack'"

이 부분의 코드가 의심되나 저도 이 부분에 대해 아는것이 없어 답변이 어렵습니다.

# Directory Traversal 공격 차단 부분에 마킹해야 하네요



#############################
# 10. 기타 공격 방지
# 허용하는 HTTP 리퀘스트 타입 (HTTP 0.9, 1.0 혹은 1.1) 이외 차단

# Directory Traversal 공격 차단
#SecFilterSelective REQUEST_URI "\.\./"




영카트5에서는 아래부분(70라인정도)에

# 3. PHP ÀÎÁ§¼Ç Ãë¾à °ø°Ý ¹æÁö(°ø°³ °Ô½ÃÆÇ ¼Ö·ç¼Ç ´ë»ó °ø°Ý Æ÷ÇÔ)
#SecRule REQUEST_URI "\.php" "chain, msg:'PHP Injection Attacks'"
#SecRule REQUEST_URI "(dir|page|)" chain

71,72라인 마킹해도 지속적으로 밀려난 라인에서 걸리길래 아래라인 5라인을 마킹했더니 에러안남
#SecRule REQUEST_URI "=(http|https|ftp)\:/"
#SecRule REQUEST_URI "shell_exec\(" "msg:'PHP Injection Attacks'"
#SecRule REQUEST_URI "/include/write\.php\?dir=(ftp|http):" "msg:'PHP Injection Attacks'"
#SecRule REQUEST_URI "/include/print_category\.php\?setup=1&dir=(ftp|http):" "msg:'PHP Injection Attacks'"
#SecRule REQUEST_URI "/zero_vote/error\.php\?dir=(ftp|http):" "msg:'PHP Injection Attacks'"