mirror of
https://github.com/comfyanonymous/ComfyUI.git
synced 2026-05-11 17:52:46 +08:00
fix comfy manager (--enable-manager) doesn't work when --disable-api-nodes is used (Content-Security-Policy error)
This commit is contained in:
parent
f6d5068ac0
commit
6a55db0766
14
server.py
14
server.py
@ -192,8 +192,18 @@ def create_block_external_middleware():
|
|||||||
response = web.Response()
|
response = web.Response()
|
||||||
else:
|
else:
|
||||||
response = await handler(request)
|
response = await handler(request)
|
||||||
|
connectSrc = "'self' data:"
|
||||||
response.headers['Content-Security-Policy'] = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self' data:; frame-src 'self'; object-src 'self';"
|
if args.enable_manager:
|
||||||
|
connectSrc += " https://api.comfy.org"
|
||||||
|
response.headers['Content-Security-Policy'] = (
|
||||||
|
"default-src 'self'; "
|
||||||
|
"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; "
|
||||||
|
"style-src 'self' 'unsafe-inline'; "
|
||||||
|
"img-src 'self' data: blob:; "
|
||||||
|
"font-src 'self'; "
|
||||||
|
f"connect-src {connectSrc}; "
|
||||||
|
"frame-src 'self'; "
|
||||||
|
"object-src 'self';")
|
||||||
return response
|
return response
|
||||||
|
|
||||||
return block_external_middleware
|
return block_external_middleware
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user