Workbench 4.10 and later defaults to the web browser whitelist being turned on. If you wish to leave the whitelist option enabled, you must add Reflow’s API servers to the list for them to work in Workbench. The whitelist does not affect Reflow content in a non-Workbench web browser.
See Web Browser Whitelist for details on configuring your whitelist.