How to encrypt payload being sent during Action Chain events?

Summary:

During an actual page load, you can see these request/response values being exchanged between browser and VBCS App. How to encrypt the payload passed during Action Chain Events?

Content (please ensure you mask any confidential information):

During Action Chain, we progressively use data entered on the page to get further info from the system to either pull data from Business Objects or to fire a OIC/Oracle SaaS REST API. During an actual page load, you can see these request/response values being exchanged between browser and VBCS App.

This opens up a grave security flaw for us wherein a malicious actor may use the current session to change parameters in the payloads being sent for getting data from Business Objects or those being sent to OIC Integration to alter the normal flow of the VBCS App, and gain access to data/files.