modsecurity for Apache protection bypass

It's possible to bypass filtering with double 'r' in boundary identifier...