[GH-ISSUE #433] Add a way for user to approve CORS requests from origins without running a separate ollama serve #25963

Open
opened 2026-04-22 01:50:12 -05:00 by GiteaMirror · 3 comments
Owner

Originally created by @jmorganca on GitHub (Aug 27, 2023).
Original GitHub issue: https://github.com/ollama/ollama/issues/433

Quite a few tools built on Ollama are hosted on alternate origins like chrome-extension:// (chrome extensions) or http://example.com (websites that want to use the user's local Ollama instance).

Tools like Figma, Zoom and Slack have a way to "allow" the browser clients to interact with a server hosted on localhost by prompting the user once to approve an origin and then remembering this decision. We would need to be careful with the form factor here, but a dialog window (similar to Apple's universal links) could be a helpful starting point.

Originally created by @jmorganca on GitHub (Aug 27, 2023). Original GitHub issue: https://github.com/ollama/ollama/issues/433 Quite a few tools built on Ollama are hosted on alternate origins like `chrome-extension://` (chrome extensions) or `http://example.com` (websites that want to use the user's local Ollama instance). Tools like Figma, Zoom and Slack have a way to "allow" the browser clients to interact with a server hosted on `localhost` by prompting the user once to approve an origin and then remembering this decision. We would need to be careful with the form factor here, but a dialog window (similar to Apple's [universal links](https://developer.apple.com/documentation/xcode/allowing-apps-and-websites-to-link-to-your-content)) could be a helpful starting point.
GiteaMirror added the feature request label 2026-04-22 01:50:12 -05:00
Author
Owner

@f0rodo commented on GitHub (Aug 27, 2023):

Localhost does work btw. Just not chrome-extensions:// which honestly is probably a good privacy policy. Chrome extensions are notorious for data/privacy abuse. https://github.com/extesy/hoverzoom/discussions/670

<!-- gh-comment-id:1694741993 --> @f0rodo commented on GitHub (Aug 27, 2023): Localhost does work btw. Just not `chrome-extensions://` which honestly is probably a good privacy policy. Chrome extensions are notorious for data/privacy abuse. https://github.com/extesy/hoverzoom/discussions/670
Author
Owner

@Nols1000 commented on GitHub (Dec 3, 2023):

Hi I've added a PR that addresses this issue. It would be nice, if you could take a look and provide feedback.

<!-- gh-comment-id:1837317052 --> @Nols1000 commented on GitHub (Dec 3, 2023): Hi I've added a PR that addresses this issue. It would be nice, if you could take a look and provide feedback.
Author
Owner

@nikhiljohn10 commented on GitHub (Jun 14, 2025):

What about including a question/checkbox in install script to allow browser extension access? If allowed, then add browser extension URL patterns to OLLAMA_ORIGINS by default. Only possible in windows and Linux, i suppose. Not sure about mac users since its just zip file and drag and drop to install. Any thoughts anyone?

<!-- gh-comment-id:2973189463 --> @nikhiljohn10 commented on GitHub (Jun 14, 2025): What about including a question/checkbox in install script to allow browser extension access? If allowed, then add browser extension URL patterns to `OLLAMA_ORIGINS` by default. Only possible in windows and Linux, i suppose. Not sure about mac users since its just zip file and drag and drop to install. Any thoughts anyone?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#25963