+- Atozed Forums (https://www.atozed.com/forums)
+-- Forum: Atozed Software (https://www.atozed.com/forums/forum-1.html)
+--- Forum: IntraWeb (https://www.atozed.com/forums/forum-3.html)
+---- Forum: English (https://www.atozed.com/forums/forum-16.html)
+----- Forum: IntraWeb General Discussion (https://www.atozed.com/forums/forum-4.html)
+----- Thread: 303 Redirect and Response Payload (/thread-3988.html)
303 Redirect and Response Payload - ALW2019 - 03-26-2024
We are using IntraWeb 15.2.36 and have an issue where we need to be able to remove or alter the Payload in the Response Header for a 303 redirect. During the application sign-on process the user-id and password are in the Request, but they are also being returned in the Payload of the Response header. How can we remove or alter the Response payload in IntraWeb?
Steps for Verification:
1. Login to the application while intercepting the request through a proxy.
2. Notice that the 303 response to the login POST request contains the password in cleartext.
(See attached screen print)
RE: 303 Redirect and Response Payload - Alexandre Machado - 04-03-2024
I'll test it and get back to you.
Anyway, this version is considerably old now and lots have changed in that area due to the introduction of new features, etc.
RE: 303 Redirect and Response Payload - ALW2019 - 04-11-2024
Any success with your testing?
RE: 303 Redirect and Response Payload - ALW2019 - 04-22-2024
Hi Alexandre, do you have any update about the 303 Payload issue?
RE: 303 Redirect and Response Payload - Alexandre Machado - 04-30-2024
I tested this with the latest version and I couldn't recreate the issue.
I'll test with your specific version and see if anything changes. I'll get back to you on this possibly tomorroww
RE: 303 Redirect and Response Payload - Alexandre Machado - 04-30-2024
BTW: Is updating to the latest version possible? Even if a fix needs to be done, it won't be possible to back port it to a version released almost 3 years ago...