Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b58e5a75ab96b20cdd7ad782f14a3a391259361a2
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api-key/{id}
GET /api/{subdomain}/**
GET /endpoint/{id}
GET /project/{id}
GET /project/{id}/api-keys
GET /project/{id}/endpoints
GET /project/{id}/subdomain/availability
GET /status
GET /user/me
GET /user/me/projects
GET /user/{id}
GET /version
POST /api-key
POST /auth/firebase
POST /endpoint
POST /project
Open service 99.83.217.1:443 · api.magic-api.io
2026-01-09 17:28
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 09 Jan 2026 17:28:42 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=iaaRqlsyUIBlAJ7ee%2ByLQKuknRNu2K9Gj09AO2bLiqQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767979722"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=iaaRqlsyUIBlAJ7ee%2ByLQKuknRNu2K9Gj09AO2bLiqQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767979722"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:80 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 302 Found
Content-Length: 0
Date: Wed, 07 Jan 2026 16:46:28 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rK8nyY5IdFgmIpoC2IILSnR46vIo%2B9GjKt%2FfokU%2FVHE%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804388"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rK8nyY5IdFgmIpoC2IILSnR46vIo%2B9GjKt%2FfokU%2FVHE%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804388"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 76.223.11.49:80 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 302 Found
Content-Length: 0
Date: Wed, 07 Jan 2026 16:46:27 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804387"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804387"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 75.2.43.161:80 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 302 Found
Content-Length: 0
Date: Wed, 07 Jan 2026 16:46:27 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804387"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804387"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 76.223.11.49:443 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Wed, 07 Jan 2026 16:45:26 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804326"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 15.197.129.158:80 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 302 Found
Content-Length: 0
Date: Wed, 07 Jan 2026 16:46:27 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804387"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kMJ%2F8yIq%2BK7ItpVqPoj4XyyFz3LETYz7commlcxh6Mk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804387"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 15.197.129.158:443 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Wed, 07 Jan 2026 16:45:26 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804326"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:443 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Wed, 07 Jan 2026 16:45:26 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804326"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 75.2.43.161:443 · api.magic-api.io
2026-01-07 16:45
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Wed, 07 Jan 2026 16:45:26 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767804326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TVJcUdzRJGYQ4LG6rzzF7Irs3ohSnXr2DBmezBn2XM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767804326"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:443 · api.magic-api.io
2026-01-02 14:40
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 02 Jan 2026 14:40:36 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=byWxPL4HnugFZ9kBk%2BT87DBX8lmjYxm6NrYMd0%2Bi960%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767364836"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=byWxPL4HnugFZ9kBk%2BT87DBX8lmjYxm6NrYMd0%2Bi960%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767364836"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 75.2.43.161:80 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 302 Found
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:08 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pfRXEwmY3bCLHg2zq%2ByVtbYXVCmiu%2BYz92FkNYxpGug%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233288"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pfRXEwmY3bCLHg2zq%2ByVtbYXVCmiu%2BYz92FkNYxpGug%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233288"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 75.2.43.161:443 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:05 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233285"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233285"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:443 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:05 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233285"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233285"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 15.197.129.158:443 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:05 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233285"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pplDlKASQp4lS%2F1syxL0sMhsGVlRzFhB5fzTriymR8E%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233285"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 76.223.11.49:80 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 302 Found
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:07 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233287"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233287"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 76.223.11.49:443 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:04 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=32UGozDPnooItSBFSgRQPUcZtUho58SgKzytQB%2FZpUg%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233284"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=32UGozDPnooItSBFSgRQPUcZtUho58SgKzytQB%2FZpUg%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233284"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:80 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 302 Found
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:07 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233287"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233287"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 15.197.129.158:80 · api.magic-api.io
2026-01-01 02:08
HTTP/1.1 302 Found
Content-Length: 0
Date: Thu, 01 Jan 2026 02:08:07 GMT
Location: https://api.magic-api.io/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767233287"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XhEvGqux4Y5sP1yCsGNlGbpGrNvea13l%2FBo%2FwbSeeMM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767233287"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Open service 99.83.217.1:443 · api.magic-api.io
2025-12-22 09:49
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Mon, 22 Dec 2025 09:49:51 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Qh%2B2pj74gcfAtVcPg0q7SJGhX41ttxCVj1kL0rM6NNk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766396991"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Qh%2B2pj74gcfAtVcPg0q7SJGhX41ttxCVj1kL0rM6NNk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766396991"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Open service 99.83.217.1:443 · api.magic-api.io
2025-12-20 08:23
HTTP/1.1 403 Forbidden
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Sat, 20 Dec 2025 08:23:03 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fvfNSRusX7QnmWqz1MJN1PllaLrrCbIBwj9kJV%2BK%2Bpc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766218983"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fvfNSRusX7QnmWqz1MJN1PllaLrrCbIBwj9kJV%2BK%2Bpc%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766218983"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close