Hint

This is a public page accessible to everyone.

Hint: Administrators can access the flag at /internal/secret_flag, but only from the local server...