fix comfy manager (--enable-manager) doesn't work when --disable-api-nodes is used (Content-Security-Policy error)

This commit is contained in:
Andray 2026-05-03 08:49:42 +04:00
parent f6d5068ac0
commit 6a55db0766

View File

@ -192,8 +192,18 @@ def create_block_external_middleware():
response = web.Response()
else:
response = await handler(request)
response.headers['Content-Security-Policy'] = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self' data:; frame-src 'self'; object-src 'self';"
connectSrc = "'self' data:"
if args.enable_manager:
connectSrc += " https://api.comfy.org"
response.headers['Content-Security-Policy'] = (
"default-src 'self'; "
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; "
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data: blob:; "
"font-src 'self'; "
f"connect-src {connectSrc}; "
"frame-src 'self'; "
"object-src 'self';")
return response
return block_external_middleware