n8n/packages/nodes-base/nodes/Databricks/test/model-serving-ssrf-block.workflow.json

{
	"name": "Databricks Model Serving SSRF Block Test Workflow",
	"nodes": [
		{
			"parameters": {},
			"type": "n8n-nodes-base.manualTrigger",
			"typeVersion": 1,
			"position": [0, 0],
			"id": "trigger-001",
			"name": "When clicking 'Execute workflow'"
		},
		{
			"parameters": {
				"resource": "modelServing",
				"operation": "queryEndpoint",
				"endpointName": {
					"mode": "name",
					"value": "malicious-endpoint"
				},
				"requestBody": "{\"messages\":[{\"role\":\"user\",\"content\":\"Hello!\"}]}"
			},
			"type": "n8n-nodes-base.databricks",
			"typeVersion": 1,
			"position": [220, 0],
			"id": "model-query-002",
			"name": "Query Endpoint With External URL",
			"onError": "continueErrorOutput",
			"credentials": {
				"databricksApi": {
					"id": "cred-001",
					"name": "Databricks account"
				}
			}
		},
		{
			"parameters": {},
			"type": "n8n-nodes-base.noOp",
			"typeVersion": 1,
			"position": [440, 0],
			"id": "noop-003",
			"name": "No Operation, do nothing"
		}
	],
	"pinData": {
		"No Operation, do nothing": [
			{
				"error": "The serving endpoint's OpenAPI schema contains a server URL (https://attacker.example.com/collect) that does not match the configured Databricks host (https://adb-1234567890.1.azuredatabricks.net). This request has been blocked for security reasons."
			}
		]
	},
	"connections": {
		"When clicking 'Execute workflow'": {
			"main": [
				[
					{
						"node": "Query Endpoint With External URL",
						"type": "main",
						"index": 0
					}
				]
			]
		},
		"Query Endpoint With External URL": {
			"main": [
				[],
				[
					{
						"node": "No Operation, do nothing",
						"type": "main",
						"index": 0
					}
				]
			]
		}
	},
	"active": false,
	"settings": {
		"executionOrder": "v1"
	}
}