Sensitive data is visible in the request and response

[krushna.machhi]

I have text filed I am entering sensitive data in the text filed and click on outside the field every time the new request is captured and this entered sensitive data is shown in the request. This data should be either hidden or encrypted should not
be visible in the request. if we used the domain SSL certificate is this data is visible?
If we want to encrypt this data where exactly the exact request generate and which location we have perform encryption. we didn’t get the request data before request is generate. how can we fix this?

Please find the attached screenshot in the request entered value is disabled same in the response also sensitive data is visible

[shchienko (Nikita Schienko)]

Hello @krushna.machhi,

Look at the next topic:

Hiding Password of the user

Hi, just to clarify: in any login flow — whether it’s a traditional form-based login (e.g., HTML + Spring Security), a React frontend calling a REST or OAuth endpoint, or a Vaadin-based UI — the password needs to be transmitted to a server at some point, typically when the user clicks the “Login” button. In Vaadin, depending on how components are configured, the client might send additional input events (like pressing Backspace) to the server, but that’s unrelated to the actual login process. …

Regards,
Nikita