Currently, within my Middleware I save a variable using req, for example: req.middleware = "my variable";

and I pull it in the controller using req.middleware, and it works perfectly, but the problem is that I pass some sensitive data and I don't know if using this ends up exposing my variables saved in the req to the client somehow?