# D2 Third party nodes do not appear - blocked due to forbidden MIME („text/html”)

**URL:** <https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916>\
**Category:** Dashboard\
**Tags:** dashboard-2\
**Created:** [24 June 2024 19:25 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916 "2024-06-24T19:25:30Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [24 June 2024 19:25 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/1 "2024-06-24T19:25:30Z")

</div>

A user has reported [an issue](https://github.com/colinl/node-red-dashboard-2-ui-gauge-classic/issues/4) against my gauge-classic node, but in fact it appears that he/she sees the same problem with other third party ui nodes. In the browser tools he sees

`/resources/@colinl/node-red-dashboard-2-ui-gauge-classic/ui-gauge-classic.umd.js” zostało zablokowane z powodu niedozwolonego typu MIME („text/html”). `

"blocked due to forbidden MIME („text/html”)."

Can anyone throw any light on this? Since the problem is not specific to the gauge node I suggest we have the discussion here rather than on the issue on github.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [24 June 2024 20:05 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/2 "2024-06-24T20:05:52Z")

</div>

This can be caused by several things but it is generally because the Express server has no-discover mimetypes turned on and then the links in the HTML are not identifying things correctly.

So I think maybe start by checking the HTML that is being delivered?

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [24 June 2024 20:29 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/3 "2024-06-24T20:29:16Z")

</div>

It must be something to do with this user's setup, as this is the first time the problem has been seen as far as I know.

---

<div class="post-metadata">

**Author:** ![joepavitt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/joepavitt/32/59722_2.png) [@joepavitt](https://discourse.nodered.org/u/joepavitt)\
**Post date:** [25 June 2024 08:09 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/4 "2024-06-25T08:09:13Z")

</div>

The only thing I can think of is a NR server restart - how are they running Node-RED?

---

<div class="post-metadata">

**Author:** ![QBANIN](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/qbanin/32/92201_2.png) [@QBANIN](https://discourse.nodered.org/u/QBANIN)\
**Post date:** [25 June 2024 08:21 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/5 "2024-06-25T08:21:14Z")

</div>

The problem mentioned by the OP was originally reported by me. Node-red is installed via docker. The problem occurs in both NR 3.11.1 and 4.0.0 . Flowfuse dashboard 2.0 1.11.1 installed normally from the palette. I just noticed that the problem occurs only when the dashboard is behind nginx reverse proxy. When opening directly everything is ok.

---

<div class="post-metadata">

**Author:** ![joepavitt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/joepavitt/32/59722_2.png) [@joepavitt](https://discourse.nodered.org/u/joepavitt)\
**Post date:** [25 June 2024 08:23 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/6 "2024-06-25T08:23:07Z")

</div>

> [@QBANIN](#):
>
> I just noticed that the problem occurs only when the dashboard is behind nginx reverse proxy. When opening directly everything is ok.

This is very useful detail, thanks. I think @hardillb reported some similar issues to this recently as well actually. I'm guessing we have a hardcoded path that isn't proxy-friendly - will investigate.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [25 June 2024 10:52 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/7 "2024-06-25T10:52:30Z")

</div>

I see that Joe has opened an issue to track this. [Third-party nodes not loading when Dashboard hosted on proxy · Issue #1024 · FlowFuse/node-red-dashboard · GitHub](https://github.com/FlowFuse/node-red-dashboard/issues/1024)

---

<div class="post-metadata">

**Author:** ![arturv2000](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/arturv2000/32/88724_2.png) [@arturv2000](https://discourse.nodered.org/u/arturv2000)\
**Post date:** [25 June 2024 12:39 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/8 "2024-06-25T12:39:52Z")

</div>

I have most of my node-red sites behind a nginx-reverse-proxy, and the third party widgets are loading fine (ui-iframe; ui-led; ui-gauge-classic).

So it can be related with the addition of docker.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [25 July 2024 12:40 UTC](https://discourse.nodered.org/t/d2-third-party-nodes-do-not-appear-blocked-due-to-forbidden-mime-text-html/88916/9 "2024-07-25T12:40:21Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.