[mistwang]

You can locate and comment out that rule, or use

SecRuleRemoveById xxxxx

to exclude that rule for that URL.
Maybe you enabled Request Body scan by default, which may cause trouble with gotroot rules.