[Bug]: Having "--listen" in the startup ARGS breaks extensions tab functionality - "extension access disabled because of command line flags".

[GalaxyTimeMachine]

Is there an existing issue for this?

• I have searched the existing issues and checked the recent builds/commits

What happened?

I've noticed for quite some time that the update and install options in "Extensions" tab didn't work. If you tried to check for updates, or create a list of available extensions, it just reported an error about it being a startup option blocking it. I tracked it to the "--listen" option that causes it.

Steps to reproduce the problem

1. Go to extensions tab.
2. Press "Check for updates"
3. An "error" appears

If I remove the "--listen" option from the startup ARGS, and restart, there is no error and functionality is restored.

What should have happened?

A list of update status should be refreshed without needing to remove the "--listen" arg each time I want to use the extensions tab.

Commit where the problem happens

602a186

What platforms do you use to access UI ?

Windows

What browsers do you use to access the UI ?

Google Chrome

Command Line Arguments

--medvram --xformers --no-half-vae --listen --api --cors-allow-origins=https://www.painthua.com --autolaunch

Additional information, context and logs

Traceback (most recent call last):
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\routes.py", line 337, in run_predict
    output = await app.get_blocks().process_api(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\blocks.py", line 1015, in process_api
    result = await self.call_function(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\blocks.py", line 833, in call_function
    prediction = await anyio.to_thread.run_sync(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\to_thread.py", line 31, in run_sync
    return await get_asynclib().run_sync_in_worker_thread(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\_backends\_asyncio.py", line 937, in run_sync_in_worker_thread
    return await future
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\_backends\_asyncio.py", line 867, in run
    result = context.run(func, *args)
  File "F:\stable-diffusion-webui\modules\ui_extensions.py", line 26, in apply_and_restart
    check_access()
  File "F:\stable-diffusion-webui\modules\ui_extensions.py", line 22, in check_access
    assert not shared.cmd_opts.disable_extension_access, "extension access disabled because of command line flags"
AssertionError: extension access disabled because of command line flags
Traceback (most recent call last):
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\routes.py", line 337, in run_predict
    output = await app.get_blocks().process_api(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\blocks.py", line 1015, in process_api
    result = await self.call_function(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\gradio\blocks.py", line 833, in call_function
    prediction = await anyio.to_thread.run_sync(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\to_thread.py", line 31, in run_sync
    return await get_asynclib().run_sync_in_worker_thread(
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\_backends\_asyncio.py", line 937, in run_sync_in_worker_thread
    return await future
  File "F:\stable-diffusion-webui\venv\lib\site-packages\anyio\_backends\_asyncio.py", line 867, in run
    result = context.run(func, *args)
  File "F:\stable-diffusion-webui\modules\ui_extensions.py", line 54, in check_updates
    check_access()
  File "F:\stable-diffusion-webui\modules\ui_extensions.py", line 22, in check_access
    assert not shared.cmd_opts.disable_extension_access, "extension access disabled because of command line flags"
AssertionError: extension access disabled because of command line flags

[Ragot-Pierre]

Throwing an assertion might not be the expected behaviour but if I remember correctly the "--listen" arg is, by default, blocking extensions tab access (to prevent malicious intents).
It can be bypassed with "--enable-insecure-extension-access" however, as written in the command line args wiki.

[GalaxyTimeMachine]

Throwing an assertion might not be the expected behaviour but if I remember correctly the "--listen" arg is, by default, blocking extensions tab access (to prevent malicious intents). It can be bypassed with "--enable-insecure-extension-access" however, as written in the command line args wiki.

Thank you! :)

[mezotaken]

That's an expected behavior.

[aristotaloss]

Nicely documented too, @mezotaken

[savekillqqp]

thank you so much it worked for me too your a god!

[iotkaden20230322]

--listen を消したら解決しました
最新版では改善しているのですね
感謝します

[shin-wn]

webui-user.sh
export COMMANDLINE_ARGS="--listen --enable-insecure-extension-access"

[1manfactory]

When working with Windows you have to edit webui-user.bat

set COMMANDLINE_ARGS=--listen --enable-insecure-extension-access

[agapeuni]

Throwing an assertion might not be the expected behaviour but if I remember correctly the "--listen" arg is, by default, blocking extensions tab access (to prevent malicious intents). It can be bypassed with "--enable-insecure-extension-access" however, as written in the command line args wiki.

It was solved thanks to you. ^^