Modo IA free version

[Mateus_A_R_Belo (Mateus)]

Where does the bug appear (feature/product)?

Somewhere else…

Describe the Bug

Hello Cursor team,

I’m having an issue where the AI chat in the free version does not display any response in the UI (nothing appears after sending a prompt).

When I open DevTools (Develop mode), I consistently see security-related errors indicating that the UI code is being blocked:

“Trusted Type expected, but String received” and workbench.desktop.main.js:542 is marked as blocked.​

“Trusted Type policy creation blocked by Content Security Policy” and workbench.desktop.main.js:139 shows the trusted-types directive as blocked.​

It looks like the workbench script is prevented from performing certain DOM updates, which may be why the AI response never renders on screen.​

What I already tried (no success):

Reinstalling Cursor.

Deleting/resetting the app data.

Logging in again using different browsers.

Could you please advise what might be causing these Trusted Types/CSP blocks in Cursor’s workbench UI, and what steps (or a build/config change) would allow the free AI chat to work normally?

Thanks in advance.

Steps to Reproduce

Install Cursor (stable) on Windows (local machine, not remote).

Sign in to Cursor.

Open any workspace/project (can be an empty folder).

Open the AI Chat panel and send any prompt (e.g., “Hello” / “Explain X”).

Observe that no assistant response is rendered in the chat UI (blank / nothing appears).

Open Develop/DevTools and check the Console.

Observe Trusted Types / CSP errors, including:

“Trusted Type expected, but String received” with workbench.desktop.main.js:542 marked as blocked.

“Trusted Type policy creation blocked by Content Security Policy” with workbench.desktop.main.js:139 and trusted-types marked as blocked.

Notes / attempted fixes (still reproduces):

Reinstalled Cursor.

Deleted/reset app data.

Logged in using different browsers, then retried in Cursor.

Expected Behavior

After sending a prompt in AI Chat (free mode), the assistant should generate and display a response normally in the chat UI (text appears in the conversation), with no Trusted Types/CSP blocks preventing the UI from updating.

Screenshots / Screen Recordings

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.2.43 (user setup)
VSCode Version: 1.105.1
Commit: 32cfbe848b35d9eb320980195985450f244b3030
Date: 2025-12-19T06:06:44.644Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.26200

Does this stop you from using Cursor

No - Cursor works, but with this issue

[deanrie]

Hey, thanks for the detailed report.

This looks like a conflict with security policies. A similar case is here: Trusted Types blocked on Parallels for Mac

Please try:

1. Start Cursor without extensions:

cursor --disable-extensions

2. Try with a clean profile:

cursor --user-data-dir %TEMP%\cursor-clean

3. Disable site isolation trials:

cursor --disable-site-isolation-trials

Also please check:

• Temporarily disable Windows Defender or your antivirus
• Whether there are any corporate policies on this device
• Try a different network without VPN

If nothing helps, please share:

• The full error stack from DevTools (Help > Toggle Developer Tools)
• Logs (Ctrl+Shift+P > Developer: Open Logs Folder) as a zip
• Which antivirus you have installed

I’ll pass this to the team for further analysis.

[Mateus_A_R_Belo (Mateus)]

Hi Cursor team,

I checked for corporate policies and also tested several environment/network options.

Policy / management checks:

• Group Policy: gpresult shows only LocalGPO (no domain GPOs applied). In Event Viewer (Microsoft-Windows-GroupPolicy/Operational), there are no Warning or Error events—only informational entries.
• Device management (dsregcmd /status):
  AzureAdJoined: NO
  EnterpriseJoined: NO
  DomainJoined: NO
  WorkplaceJoined: YES
  WorkAccountCount: 1
  WorkplaceTenantName: SEPLAG/MG
  WorkplaceMdmUrl / WorkplaceSettingsUrl: empty

Environment:

• Antivirus: Kaspersky (I also disabled it temporarily to test, but the issue persisted)
• VPN: disabled

Troubleshooting steps tried (no change):

• “Start Cursor without extensions”
• “Try with a clean profile”
• “Disable site isolation trials”
• Tested using a different network (still no VPN)

I still see Trusted Types / CSP violations in DevTools and the workbench script being blocked (e.g., workbench.desktop.main.js blocked), and the free AI chat doesn’t render any response in the UI.

Could the Workplace registration (SEPLAG/MG) be causing these Trusted Types/CSP blocks? If so, do you recommend any specific configuration changes or logs to collect for diagnosis?

Thanks!

[deanrie]

Thanks for the info. WorkplaceJoined (SEPLAG/MG) is blocking Cursor via Intune/Entra CSP policies.

Diagnostics for IT:
dsregcmd /status /verbose to check MDM
Event Viewer → DeviceManagement-Enterprise-Diagnostics-Provider for blocking logs

Fix (IT only):

1. Intune → Application Control: add Cursor.exe to the allowlist
2. Defender Application Control: exclude Cursor.exe
3. Purview Endpoint DLP: exclude Cursor.exe (if used)

This isn’t a Cursor bug. It’s SEPLAG/MG corporate policy and it can only be fixed by your IT team.