GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d66af4a1e68ee110966857bcf02441072224410722
GraphQL introspection enabled at /api/graphql Types: 11 (by kind: ENUM: 2, OBJECT: 7, SCALAR: 2) Operations: - Query: Query | fields: hello Directives: deprecated, include, skip, specifiedBy (total: 4)
Open service 20.4.244.223:443 · test.flow.shell.com
2026-01-09 20:07
HTTP/1.1 200 OK Content-Length: 761 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 20:08:57 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "10812723" Last-Modified: Fri, 22 Mar 2024 11:45:45 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Page title: React App <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.4.1/css/all.css" integrity="sha384-5sAR7xN1Nv6T6+dT2mhtzEpVJvfS3NScPQTrOxhwjIuvcA67KV2R5Jz6kr4abQsz" crossorigin="anonymous"/><title>React App</title><script defer="defer" src="/static/js/main.325bc6bc.js"></script><link href="/static/css/main.34f25344.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="modal"></div><div id="root"></div></body></html>
Open service 20.4.244.223:443 · test.flow.shell.com
2026-01-02 18:13
HTTP/1.1 200 OK Content-Length: 761 Connection: close Content-Type: text/html Date: Fri, 02 Jan 2026 18:13:57 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "10812723" Last-Modified: Fri, 22 Mar 2024 11:45:45 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Page title: React App <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.4.1/css/all.css" integrity="sha384-5sAR7xN1Nv6T6+dT2mhtzEpVJvfS3NScPQTrOxhwjIuvcA67KV2R5Jz6kr4abQsz" crossorigin="anonymous"/><title>React App</title><script defer="defer" src="/static/js/main.325bc6bc.js"></script><link href="/static/css/main.34f25344.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="modal"></div><div id="root"></div></body></html>
Open service 20.4.244.223:443 · test.flow.shell.com
2025-12-23 00:45
HTTP/1.1 200 OK Content-Length: 761 Connection: close Content-Type: text/html Date: Tue, 23 Dec 2025 00:45:36 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "10812723" Last-Modified: Fri, 22 Mar 2024 11:45:45 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Page title: React App <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.4.1/css/all.css" integrity="sha384-5sAR7xN1Nv6T6+dT2mhtzEpVJvfS3NScPQTrOxhwjIuvcA67KV2R5Jz6kr4abQsz" crossorigin="anonymous"/><title>React App</title><script defer="defer" src="/static/js/main.325bc6bc.js"></script><link href="/static/css/main.34f25344.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="modal"></div><div id="root"></div></body></html>
Open service 20.4.244.223:443 · test.flow.shell.com
2025-12-21 08:29
HTTP/1.1 200 OK Content-Length: 761 Connection: close Content-Type: text/html Date: Sun, 21 Dec 2025 08:29:19 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "10812723" Last-Modified: Fri, 22 Mar 2024 11:45:45 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Page title: React App <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.4.1/css/all.css" integrity="sha384-5sAR7xN1Nv6T6+dT2mhtzEpVJvfS3NScPQTrOxhwjIuvcA67KV2R5Jz6kr4abQsz" crossorigin="anonymous"/><title>React App</title><script defer="defer" src="/static/js/main.325bc6bc.js"></script><link href="/static/css/main.34f25344.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="modal"></div><div id="root"></div></body></html>
Open service 20.4.244.223:443 · test.flow.shell.com
2025-12-19 09:18
HTTP/1.1 200 OK Content-Length: 761 Connection: close Content-Type: text/html Date: Fri, 19 Dec 2025 09:18:42 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "10812723" Last-Modified: Fri, 22 Mar 2024 11:45:45 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Page title: React App <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.4.1/css/all.css" integrity="sha384-5sAR7xN1Nv6T6+dT2mhtzEpVJvfS3NScPQTrOxhwjIuvcA67KV2R5Jz6kr4abQsz" crossorigin="anonymous"/><title>React App</title><script defer="defer" src="/static/js/main.325bc6bc.js"></script><link href="/static/css/main.34f25344.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="modal"></div><div id="root"></div></body></html>