Requests can't be redirected to private networks
The API blocks any Single or Browser request whose target URL, follow-redirect chain, or proxy field resolves to a private or reserved IP range. Even if a public target redirects into an internal network, the request stops before it gets there.