Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34cbd5979450db21b910e7a5dc2d376b003548463
GraphQL introspection enabled at /graphql Types: 217 (by kind: ENUM: 12, INPUT_OBJECT: 27, INTERFACE: 2, OBJECT: 74, SCALAR: 72, UNION: 30) Operations: - Query: Query | fields: allAdmins, allUsers, me, user, userList - Mutation: Mutation | fields: login, setupProfile, signup, updateProfile, uploadAvatar Directives: auth, deprecated, include, oneOf, skip, specifiedBy (total: 6)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34cbd5979450db21b910e7a5dc2d376b003548463
GraphQL introspection enabled at /graphql Types: 217 (by kind: ENUM: 12, INPUT_OBJECT: 27, INTERFACE: 2, OBJECT: 74, SCALAR: 72, UNION: 30) Operations: - Query: Query | fields: allAdmins, allUsers, me, user, userList - Mutation: Mutation | fields: login, setupProfile, signup, updateProfile, uploadAvatar Directives: auth, deprecated, include, oneOf, skip, specifiedBy (total: 6)
Open service 15.197.129.158:80 · api.spelfriheten.se
2026-01-09 16:59
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 17:00:59 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MNPSXKzs%2FWx69woHFtOQWieSKjCZjqbHnzz7D4ym6%2FQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767978059"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MNPSXKzs%2FWx69woHFtOQWieSKjCZjqbHnzz7D4ym6%2FQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767978059"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.43.161:443 · api.spelfriheten.se
2026-01-09 15:22
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 15:22:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jC1JY2wUucO2mqRzVWNQQvmUG8Hzi8X4N%2B1v49nNDv0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767972165"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jC1JY2wUucO2mqRzVWNQQvmUG8Hzi8X4N%2B1v49nNDv0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767972165"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:80 · api.spelfriheten.se
2026-01-02 17:51
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 17:51:09 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hXJu3x7EvQDwp6z%2BAZnodpyzw0hhf%2FjCEumL5QHbEqk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767376269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hXJu3x7EvQDwp6z%2BAZnodpyzw0hhf%2FjCEumL5QHbEqk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767376269"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.43.161:443 · api.spelfriheten.se
2026-01-02 17:29
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 17:29:13 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=M4dkl8ALiKf9waWcXjdNPU1yar4%2B0K1rflIwuUZE0LM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767374953"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=M4dkl8ALiKf9waWcXjdNPU1yar4%2B0K1rflIwuUZE0LM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767374953"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.43.161:443 · api.spelfriheten.se
2025-12-23 09:11
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 09:11:31 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BpkcczDzr98U4oPHBbRKZLaQlka7AOfWjfDqa%2BsYfDE%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766481091"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BpkcczDzr98U4oPHBbRKZLaQlka7AOfWjfDqa%2BsYfDE%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766481091"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:80 · api.spelfriheten.se
2025-12-23 08:12
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 08:12:34 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=eJ%2B9kcSF%2FncdgcyjSD%2BFRvMJpqFry5w95p0oZu9DB5o%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766477554"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=eJ%2B9kcSF%2FncdgcyjSD%2BFRvMJpqFry5w95p0oZu9DB5o%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766477554"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.43.161:443 · api.spelfriheten.se
2025-12-21 11:11
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 11:11:56 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Ac%2BPP54kuHRq5Qf%2BrKtqEJEDbiZ7h%2BSMBdABn9uLTvA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766315516"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Ac%2BPP54kuHRq5Qf%2BrKtqEJEDbiZ7h%2BSMBdABn9uLTvA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766315516"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:80 · api.spelfriheten.se
2025-12-21 07:08
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 07:08:36 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NcTRYKsSJw3kE4FgLXqSAwBzaufgKrilEr0YfzQpO1k%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766300916"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NcTRYKsSJw3kE4FgLXqSAwBzaufgKrilEr0YfzQpO1k%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766300916"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.43.161:443 · api.spelfriheten.se
2025-12-19 07:42
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:42:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=BE0SY6hNFgn5JL6UkFPqn7E409VDBXrURdyp31%2BrIEI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766130171"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=BE0SY6hNFgn5JL6UkFPqn7E409VDBXrURdyp31%2BrIEI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766130171"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:80 · api.spelfriheten.se
2025-12-19 00:46
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 00:46:39 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9rNSuqjsU0r8h6ZnN%2BYqwl3yc7vP%2B0cgp2KVuNkXWus%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766105199"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9rNSuqjsU0r8h6ZnN%2BYqwl3yc7vP%2B0cgp2KVuNkXWus%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766105199"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>