数据源在post请求中明文传输，怎么改成非url中传输，或加密的

数据源添加后是加密的，但在实际使用时，有看内网传输中，有post请求带上数据源明文用户名和密码。非常不安全。见如下url

POST /?password=abcpass&query_id=ca7dxxx-xx-xxx-xxx-xxxxx&compress=1&extremes=0&user=dexx&database=dbxx
User-Agent: Apache-HttpClient/4.5 (Java/1.xx)

Start by reproducing the POST request shown in the issue and trace where the data-source username and password are added to its URL. Determine the project’s intended handling for these credentials, then verify that requests no longer expose them in plaintext in the URL or otherwise transmit them insecurely.

Written by the indexing model from the issue text.