I think the fault here is squarely on Okta. They're asking for these plain-text HAR-encoded sessions for troubleshooting but crossing their fingers hoping the e

I think the fault here is squarely on Okta. They're asking for these plain-text HAR-encoded sessions for troubleshooting but crossing their fingers hoping the end user properly sanitizes it. Why not sanitize the HAR data on upload so that by the time it hits your system and is available to your underpaid and understaffed support techs it's completely sanitized to only the relevant and non-secure portions? HAR is structured data and is very easy to sanitize programatically. It's not rocket science.