Implemented
0
[Bug/Security] Fresh self-hosted n8n instance flagged as Phishing/Social Engineering by Google Safe Browsing
Source: n8n-io/n8n#41280 · opened by @uncodelab
Describe the bug Immediately upon deploying a clean, self-hosted n8n instance using Docker on a dedicated subdomain (n8n.example.com), Google Safe Browsing and Google Search Console flagged the domain for Social Engineering / Phishing. Google Search Console specifically highlights the /signin redirect endpoint as deceptive: • This appears to be an automated false-positive triggered when Googlebot scans new subdomains (via Certificate Transparency logs) and encounters an unindexed authentication screen (/signin) without existing domain authority. To Reproduce 1. Spin up a fresh n8n Docker container on a new subdomain behind a reverse proxy (Nginx / Cloudflare) over HTTPS. 2. Access for the first time. 3. Observe Google Safe Browsing flagging the site as "Deceptive site ahead" within hours or days of deployment. Expected behavior The n8n web interface should include standard anti-indexing directives (e.g., <meta name="robots" content="noindex, n…
No pledges yet. Be the first to back this.
Comments
Similar requests
n8n MCP server tool descriptions cause excessive token usage in Claude, hitting conversation limits quickly
0 votes · 0 comments
Document several environment variables that n8n reads but the docs do not list
0 votes · 0 comments
Feature request: Expose stop execution in Instance-level MCP
0 votes · 0 comments
AI Agent: return tool-schema validation failures to the model as recoverable errors instead of terminating the execution
0 votes · 0 comments
Anthropic Chat Model: expose "strict": true for client tool definitions
0 votes · 0 comments
No comments yet.