303 Redirect and Response Payload

[ALW2019]

We are using IntraWeb 15.2.36 and have an issue where we need to be able to remove or alter the Payload in the Response Header for a 303 redirect.  During the application sign-on process the user-id and password are in the Request, but they are also being returned in the Payload of the Response header.  How can we remove or alter the Response payload in IntraWeb?

Steps for Verification:
1. Login to the application while intercepting the request through a proxy.
2. Notice that the 303 response to the login POST request contains the password in cleartext.
(See attached screen print)

[Alexandre Machado]

I'll test it and get back to you.

Anyway, this version is considerably old now and lots have changed in that area due to the introduction of new features, etc.

[ALW2019]

Any success with your testing?

[ALW2019]

Hi Alexandre, do you have any update about the 303 Payload issue?