GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a151c4764
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : imageName=Homemade description=Private videoopptak gjort hjemme id=1 name=Hjemmevideo clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76ac5f006f6
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a07829ac2
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : id=1 name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a277cd248
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme id=1 clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a2cec291a
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : imageName=Homemade description=Private videoopptak gjort hjemme id=1 name=Hjemmevideo clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76aec3ca070
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : id=1 name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a3e479d66
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme id=1 clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a3b24fa78
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 clipsToTagsSingle (args: optional/default) : tagId=1 clipId=585 tagsSingle (args: optional/default) : imageName=Homemade description=Private videoopptak gjort hjemme id=1 name=Hjemmevideo clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76ab0e98140
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : imageName=Homemade description=Private videoopptak gjort hjemme id=1 name=Hjemmevideo clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a10d2358a
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme id=1 clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a313616b4
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : id=1 name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a5d26b308
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : id=1 name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76ac94cc512
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 dateAdded=2016-10-09T00:00:00.000Z clipsToTagsSingle (args: optional/default) : clipId=585 tagId=1 tagsSingle (args: optional/default) : id=1 name=Hjemmevideo imageName=Homemade description=Private videoopptak gjort hjemme clipsAggretate (args: none) : count=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35bde7db9c792f8db885041ec0cc4a76a2d220f78
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 40, OBJECT: 27, SCALAR: 3) Operations: - Query: Query | fields: clips, clipsSingle, clipsToTags, clipsToTagsSingle, tags - Mutation: Mutation | fields: deleteFromClips, insertIntoClips, insertIntoClipsSingle, insertIntoClipsToTags, updateClips Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 4 clipsSingle (args: optional/default) : dateAdded=2016-10-09T00:00:00.000Z id=3018 name=Bang.com - April Brookes - Scene 1 scene=0 rating=4 filename=april-brookes-scene-1.1080p.mp4 clipsToTagsSingle (args: optional/default) : tagId=1 clipId=585 tagsSingle (args: optional/default) : description=Private videoopptak gjort hjemme id=1 name=Hjemmevideo imageName=Homemade clipsAggretate (args: none) : count=1
Open service 142.250.186.147:443 · api.snuske.land
2026-01-09 06:08
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: 68a9711e5a7f38b07610c64689dfc90c
date: Fri, 09 Jan 2026 06:08:29 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}
Open service 142.250.186.147:443 · api.snuske.land
2026-01-02 06:51
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: a320bdd85a5894a9d7cd682eba1d1a5f
date: Fri, 02 Jan 2026 06:51:27 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}
Open service 142.250.186.147:443 · api.snuske.land
2025-12-30 10:10
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: 5fc95df40a3ac62252260d1e1002ca62
date: Tue, 30 Dec 2025 10:11:00 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}
Open service 142.250.186.147:443 · api.snuske.land
2025-12-22 23:27
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: 23a656b1e462968aac82964d442927ab
date: Mon, 22 Dec 2025 23:28:03 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}
Open service 142.250.186.147:443 · api.snuske.land
2025-12-21 07:44
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: e0bf9363f73794f6dd490fdf1ad0d414
date: Sun, 21 Dec 2025 07:45:02 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}
Open service 142.250.186.147:443 · api.snuske.land
2025-12-19 09:56
HTTP/1.1 400 Bad Request
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-cloud-trace-context: 47f036ebe8cc44f85b8fc24c19800ac1
date: Fri, 19 Dec 2025 09:56:14 GMT
server: Google Frontend
Content-Length: 1356
Connection: close
{"errors":[{"message":"This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight\n","extensions":{"code":"BAD_REQUEST","stacktrace":["BadRequestError: This operation has been blocked as a potential Cross-Site Request Forgery (CSRF). Please either specify a 'content-type' header (with a type that is not one of application/x-www-form-urlencoded, multipart/form-data, text/plain) or provide a non-empty value for one of the following headers: x-apollo-operation-name, apollo-require-preflight",""," at new GraphQLErrorWithCode (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:7:9)"," at new BadRequestError (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/internalErrorClasses.js:75:9)"," at preventCsrf (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/preventCsrf.js:29:11)"," at ApolloServer.executeHTTPGraphQLRequest (file:///deno-dir/npm/registry.npmjs.org/@apollo/server/5.2.0/dist/esm/ApolloServer.js:525:17)"," at eventLoopTick (ext:core/01_core.js:175:7)"]}}]}