That could work if you are just going to store things as base64. It accomplishes nothing if you are going to decode the base64 on the backend and then use the

That could work if you are just going to store things as base64. It accomplishes nothing if you are going to decode the base64 on the backend and then use the original value as-is. If anything it's worse than nothing, because now mod_secure will just see the base64 content and might fail to detect certain attacks.