Avoid sending send-data headers in API response body

What does this MR do and why?

If processed incorrectly it may leak sensitive data that is usually sent via headers

Closes: https://gitlab.com/gitlab-org/gitlab/-/issues/324829