Comfy-Org/ComfyUI-Manager
1
0
Fork 0
mirror of https://github.com/Comfy-Org/ComfyUI-Manager.git synced 2026-11-04 23:37:31 +00:00
Code Issues 456 Projects Packages Wiki Activity

[GH-ISSUE #2842] [Bug] Extensions page does not load, possible Content-Security-Policy error #1040

New issue
Open
opened 2026-10-27 21:25:15 +00:00 by bsakaguchi · 2 comments
bsakaguchi commented 2026-10-27 21:25:15 +00:00
Owner
Copy link

Originally created by @GroxicTinch on GitHub (Apr 30, 2026).
Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2842

I am running comfyui-portable and I get the following issue in console when I open comfy manager

Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://api.comfy.org/nodes?node_id=comfy-core because it violates the following directive: “connect-src 'self' data:” [vendor-axios-B2OLCPxZ.js:3:8538](http://127.0.0.1:8188/assets/vendor-axios-B2OLCPxZ.js)
Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-dsn.algolia.net/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js)
Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-3.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js)
Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-1.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js)
Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-2.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js)
Algolia search provider failed (1 failures): RetryError: Unreachable hosts - your application id may be incorrect. If the error persists, please reach out to the Algolia Support team: https://alg.li/support.
    AlgoliaError common.js:275
    ErrorWithStackTrace common.js:284
    RetryError common.js:290
    retry common.js:476
    retry common.js:505
[registrySearchGateway.ts:158:17](http://127.0.0.1:8188/src/services/gateway/registrySearchGateway.ts)
Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://api.comfy.org/nodes?limit=64&page=1 because it violates the following directive: “connect-src 'self' data:” [vendor-axios-B2OLCPxZ.js:3:8538](http://127.0.0.1:8188/assets/vendor-axios-B2OLCPxZ.js)
Parameter defaultValue is deprecated. The default value in settings definition will be used instead. [settings.ts:58:15](http://127.0.0.1:8188/src/scripts/ui/settings.ts)

This causes the nodes manager to only show skeleton entries and never actually load. I can enable the legacy ui and that works for the nodes manager.

Originally created by @GroxicTinch on GitHub (Apr 30, 2026). Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2842 I am running comfyui-portable and I get the following issue in console when I open comfy manager ``` Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://api.comfy.org/nodes?node_id=comfy-core because it violates the following directive: “connect-src 'self' data:” [vendor-axios-B2OLCPxZ.js:3:8538](http://127.0.0.1:8188/assets/vendor-axios-B2OLCPxZ.js) Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-dsn.algolia.net/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js) Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-3.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js) Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-1.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js) Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://4e0ro38hs8-2.algolianet.com/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(5.21.0)%3B%20Lite%20(5.21.0)%3B%20Browser&x-algolia-api-key=684d998c36b67a9a9fce8fc2d8860579&x-algolia-application-id=4E0RO38HS8 because it violates the following directive: “connect-src 'self' data:” [vendor-other-DX2qPW6O.js:248:19894](http://127.0.0.1:8188/assets/vendor-other-DX2qPW6O.js) Algolia search provider failed (1 failures): RetryError: Unreachable hosts - your application id may be incorrect. If the error persists, please reach out to the Algolia Support team: https://alg.li/support. AlgoliaError common.js:275 ErrorWithStackTrace common.js:284 RetryError common.js:290 retry common.js:476 retry common.js:505 [registrySearchGateway.ts:158:17](http://127.0.0.1:8188/src/services/gateway/registrySearchGateway.ts) Content-Security-Policy: The page’s settings blocked the loading of a resource (connect-src) at https://api.comfy.org/nodes?limit=64&page=1 because it violates the following directive: “connect-src 'self' data:” [vendor-axios-B2OLCPxZ.js:3:8538](http://127.0.0.1:8188/assets/vendor-axios-B2OLCPxZ.js) Parameter defaultValue is deprecated. The default value in settings definition will be used instead. [settings.ts:58:15](http://127.0.0.1:8188/src/scripts/ui/settings.ts) ``` This causes the nodes manager to only show skeleton entries and never actually load. I can enable the legacy ui and that works for the nodes manager.
bsakaguchi commented 2026-10-27 21:25:15 +00:00
Author
Owner
Copy link

@Phosay commented on GitHub (May 2, 2026):

Interestingly the most probable reason for the newer manager UI blocking requests is --disable-api-nodes argument, while the name would suggest just turning off cloud/API inference nodes it actually blocks everything since it needs to go through https://api.comfy.org/nodes first regardless of the node source, at least from what I saw myself as removing that argument made newer UI to just work.

<!-- gh-comment-id:4363291382 --> @Phosay commented on GitHub (May 2, 2026): Interestingly the most probable reason for the newer manager UI blocking requests is --disable-api-nodes argument, while the name would suggest just turning off cloud/API inference nodes it actually blocks everything since it needs to go through https://api.comfy.org/nodes first regardless of the node source, at least from what I saw myself as removing that argument made newer UI to just work.
bsakaguchi commented 2026-10-27 21:25:15 +00:00
Author
Owner
Copy link

@GroxicTinch commented on GitHub (May 2, 2026):

That was it! thank you! I disabled api nodes so the server wouldnt yell at me, this was the cause.

<!-- gh-comment-id:4363440040 --> @GroxicTinch commented on GitHub (May 2, 2026): That was it! thank you! I disabled api nodes so the server wouldnt yell at me, this was the cause.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
fix/per-graph-clear-hook
fix/manager-theme-styles
desktop-linux-form-factor
chore/node-runtime-refresh-2026-09-28
manager-v4
feat/v4-flagged-policy
fix/v3-ui-escaping
fix/v4-ui-escaping
feat/v3-flagged-policy
fix/v4-uv-conflict-attribution
test/issue-3128-c1-guard
fix/issue-3128-c1
feat/v4-dedicated-install-flags
fix/pygit2-fallback-followups
fix/comfyui-versions-pick-latest
brucew4yn3rp/main
manager-cacheless
feat/manager-v4-general-pip-policy
readme-for-migration
draft-v4
reverted-matrix-nio
fix/missing-nodes-in-subgraph
draft-v4-snapshot-diff
feat/add-taskqueue-unit-tests
feat/complete-todo-implementation
docs/docs-readme
docs/js-readme
tests/api-tests
api/openapi-spec
docs/node-db-readme
docs/glob-readme
draft-v4-add-legacy-route
draft-v4-contributing
feat/cacheless-v2
rh-test
rhform
dbg1484-1
rework_version_store
attach_node_versions
refactor/pygit2
4.3
3.42
4.2.2
4.2.1
4.1
3.39.3
4.1b8
4.1b6
4.1b5
4.1b4
4.1b3
4.1b2
4.1b1
4.0.5
3.39.2
3.39.1
4.0.4
4.0.3
3.39
3.38.3
3.38.2
3.38
3.37.1
3.37
3.35
3.33.8
3.33.7
3.33.6
3.33.5
3.33.4
3.33.3
3.33.2
3.33
3.32.5
3.32.4
3.32.3
3.32.2
3.32.1
3.32
3.31.13
3.31.12
3.31.11
3.31.8
3.31.6
3.31.4
3.31.2
3.31.1
3.31
3.30.8
3.30.7
3.30.6
3.30.5
3.30.4
3.30.2
3.29
3.28
3.27.11
3.27.8
3.27.3
3.27.2
3.27
3.26.2
3.26.1
3.26
3.25.1
3.25
3.24.1
3.24
3.23
3.22
3.21.5
3.21.3
3.21.1
3.19
3.18.1
3.17.11
3.17.9
3.17.7
3.17.6
3.17.4
3.17.3
3.17.2
3.17.1
3.17
3.16
3.15
3.14
3.13.1
3.13
3.12.2
3.12.1
3.12
3.11.3
3.11.2
3.11
3.10
3.9.4
3.9.3
3.9.2
3.9.1
3.9
3.8.1
3.8
3.7.6
3.7.5
3.7.4
3.7.3
3.7.2
3.7
3.6.5
3.6.4
3.6.2
3.6.1
3.5
3.3.11
3.3.10
3.3.9
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
2.56.2
3.3
2.55.5
2.55.3
2.54
2.53
2.52
3.0.1
2.51.9
2.51.8
2.51.7
2.51.6
2.51.5
2.51.4
2.51.2
2.51.1
2.50.1
2.50
2.48.7
2.48.6
2.48.3
2.48.4
2.48.2
2.48.1
Labels
Clear labels   
bug

   
CNR

   
duplicate

   
enhancement

   
feature request

   
feature request

   
pull-request
Mirrored from GitHub Pull Request

  
wontfix
No labels
bug
CNR
duplicate
enhancement
feature request
feature request
pull-request
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Comfy-Org/ComfyUI-Manager#1040
No description provided.