[GH-ISSUE #669] Allow customizing allowed headers in CORS settings #300

New Issue

GiteaMirror · 2026-04-12T09:50:35-05:00

GiteaMirror commented

2026-04-12 09:50:35 -05:00

Originally created by @spaceemotion on GitHub (Oct 1, 2023).
Original GitHub issue: https://github.com/ollama/ollama/issues/669

Based on some additional research on an issue I have (https://github.com/jmorganca/ollama/issues/300#issuecomment-1742099347), I am getting the following error in chrome/firefox:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://localhost:11434/api/tags. (Reason: header ‘baggage’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response).

(see https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowHeaderFromPreflight for details)

It would be helpful to allow all headers (if possible?) as I am able to call the API via tools like curl, postman, etc., but not using fetch() from a webpage. This does not need to be the default, an env variable like OLLAMA_HOST and such works for me.

Originally created by @spaceemotion on GitHub (Oct 1, 2023). Original GitHub issue: https://github.com/ollama/ollama/issues/669 Based on some additional research on an issue I have (https://github.com/jmorganca/ollama/issues/300#issuecomment-1742099347), I am getting the following error in chrome/firefox: > Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://localhost:11434/api/tags. (Reason: header ‘baggage’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response). (see https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowHeaderFromPreflight for details) It would be helpful to allow all headers (if possible?) as I am able to call the API via tools like curl, postman, etc., but not using `fetch()` from a webpage. This does not need to be the default, an env variable like `OLLAMA_HOST` and such works for me.

GiteaMirror closed this issue

2026-04-12 09:50:36 -05:00

GiteaMirror commented

2026-04-12 09:50:38 -05:00

@spaceemotion commented on GitHub (Oct 8, 2023):

Quick update: I found a middleware that intercepted the fetch calls to add custom headers. Blocking the middleware for requests to Ollama did the trick. However, it would still be nice to be able to control this natively.

@spaceemotion commented on GitHub (Oct 8, 2023): Quick update: I found a middleware that intercepted the fetch calls to add custom headers. Blocking the middleware for requests to Ollama did the trick. However, it would still be nice to be able to control this natively.

GiteaMirror commented

2026-04-12 09:50:38 -05:00

@jmorganca commented on GitHub (Oct 28, 2023):

Hi @spaceemotion, OLLAMA_ORIGINS is available as an environment variable you can set: https://github.com/jmorganca/ollama/blob/main/docs/faq.md#how-can-i-allow-additional-web-origins-to-access-ollama

Hope this helps! Sorry for taking awhile to respond.

@jmorganca commented on GitHub (Oct 28, 2023): Hi @spaceemotion, `OLLAMA_ORIGINS` is available as an environment variable you can set: https://github.com/jmorganca/ollama/blob/main/docs/faq.md#how-can-i-allow-additional-web-origins-to-access-ollama Hope this helps! Sorry for taking awhile to respond.

GiteaMirror commented

2026-04-12 09:50:38 -05:00

@do-me commented on GitHub (Mar 6, 2024):

Did anyone find a solution to make this work on Firefox as well? I'm not sure whether it's missing user agent headers or whether it's http to https connection problem.

I currently run:

on Windows Powershell:$env:OLLAMA_ORIGINS="https://do-me.github.io"; ollama serve
on Ubuntu: OLLAMA_ORIGINS="https://do-me.github.io" ollama serve

This works on Chromium (like Chrome and Edge) but not FF. FF gives me a link to this and the logs show a 204 error.

[GIN] 2024/03/06 - 13:16:24 | 204 | 0s | 127.0.0.1 | OPTIONS "/api/chat"

Background: I want to make the Ollama SemanticFinder integration work in FF too.

@do-me commented on GitHub (Mar 6, 2024): Did anyone find a solution to make this work on Firefox as well? I'm not sure whether it's missing user agent headers or whether it's http to https connection problem. I currently run: - on Windows Powershell:`$env:OLLAMA_ORIGINS="https://do-me.github.io"; ollama serve` - on Ubuntu: `OLLAMA_ORIGINS="https://do-me.github.io" ollama serve` This works on Chromium (like Chrome and Edge) but not FF. FF gives me a link to [this](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowHeaderFromPreflight?utm_source=devtools&utm_medium=firefox-cors-errors&utm_campaign=default) and the logs show a 204 error. `[GIN] 2024/03/06 - 13:16:24 | 204 | 0s | 127.0.0.1 | OPTIONS "/api/chat"` Background: I want to make the [Ollama SemanticFinder integration work in FF too](https://www.reddit.com/r/ollama/comments/1b79c23/inbrowser_rag_feeding_ollama/).

GiteaMirror commented

2026-04-12 09:50:39 -05:00

@osfa commented on GitHub (Mar 14, 2024):

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://127.0.0.1:11434/api/chat. (Reason: header ‘user-agent’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response). same issue. I also have the same issue in safari, but works in chrome. missing user agent headers is the issue I think?

@osfa commented on GitHub (Mar 14, 2024): `Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://127.0.0.1:11434/api/chat. (Reason: header ‘user-agent’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response).` same issue. I also have the same issue in safari, but works in chrome. missing user agent headers is the issue I think?

GiteaMirror commented

2026-04-12 09:50:39 -05:00

@do-me commented on GitHub (Mar 14, 2024):

The issue is precisely this, right. I suppose one could just route everything over a proxy like https://corsproxy.io/ but I'd prefer a clean solution not relying on a third-party service.

@do-me commented on GitHub (Mar 14, 2024): The issue is precisely this, right. I suppose one could just route everything over a proxy like https://corsproxy.io/ but I'd prefer a clean solution not relying on a third-party service.

GiteaMirror commented

2026-04-12 09:50:39 -05:00

@Anivie commented on GitHub (Mar 30, 2024):

I am get the same error even I am run with chrome, is there any way to solve this error with Access-Control-Allow-Headers?

@Anivie commented on GitHub (Mar 30, 2024): I am get the same error even I am run with chrome, is there any way to solve this error with `Access-Control-Allow-Headers`?

GiteaMirror commented

2026-04-12 09:50:40 -05:00

@Kmfernan5 commented on GitHub (Apr 26, 2024):

same here

@Kmfernan5 commented on GitHub (Apr 26, 2024): same here

GiteaMirror commented

2026-04-12 09:50:40 -05:00

@Yash-1511 commented on GitHub (May 2, 2024):

same issue! please resolve this issue

@Yash-1511 commented on GitHub (May 2, 2024): same issue! please resolve this issue

GiteaMirror commented

2026-04-12 09:50:41 -05:00

@ewantindale commented on GitHub (May 3, 2024):

Hi @spaceemotion, OLLAMA_ORIGINS is available as an environment variable you can set: https://github.com/jmorganca/ollama/blob/main/docs/faq.md#how-can-i-allow-additional-web-origins-to-access-ollama

Hope this helps! Sorry for taking awhile to respond.

I followed the steps here for Linux but I am still getting this error in Chrome:

Access to fetch at 'http://localhost:11434/v1/chat/completions' from origin 'http://localhost:5173' has been blocked by CORS policy: Request header field x-stainless-os is not allowed by Access-Control-Allow-Headers in preflight response.

@ewantindale commented on GitHub (May 3, 2024): > Hi @spaceemotion, `OLLAMA_ORIGINS` is available as an environment variable you can set: https://github.com/jmorganca/ollama/blob/main/docs/faq.md#how-can-i-allow-additional-web-origins-to-access-ollama > > Hope this helps! Sorry for taking awhile to respond. I followed the steps here for Linux but I am still getting this error in Chrome: `Access to fetch at 'http://localhost:11434/v1/chat/completions' from origin 'http://localhost:5173' has been blocked by CORS policy: Request header field x-stainless-os is not allowed by Access-Control-Allow-Headers in preflight response.`

GiteaMirror commented

2026-04-12 09:50:41 -05:00

@spaceemotion commented on GitHub (May 3, 2024):

@ewantindale the x-stainless headers are from the OpenAI SDK, you have to replace how it handles headers internally as a workaround:


class NoStainlessOpenAI extends OpenAI {
  defaultHeaders(opts: FinalRequestOptions) {
    return {
      Accept: 'application/json',
      'Content-Type': 'application/json',
      ...this.authHeaders(opts),
    };
  }
}

@spaceemotion commented on GitHub (May 3, 2024): @ewantindale the `x-stainless` headers are from the OpenAI SDK, you have to replace how it handles headers internally as a workaround: ```ts class NoStainlessOpenAI extends OpenAI { defaultHeaders(opts: FinalRequestOptions) { return { Accept: 'application/json', 'Content-Type': 'application/json', ...this.authHeaders(opts), }; } } ```

GiteaMirror commented

2026-04-12 09:50:41 -05:00

@ewantindale commented on GitHub (May 3, 2024):

@ewantindale the x-stainless headers are from the OpenAI SDK, you have to replace how it handles headers internally as a workaround:

class NoStainlessOpenAI extends OpenAI {
  defaultHeaders(opts: FinalRequestOptions) {
    return {
      Accept: 'application/json',
      'Content-Type': 'application/json',
      ...this.authHeaders(opts),
    };
  }
}

Thanks, fixed that issue but now I get

Access to fetch at 'http://localhost:11434/v1/chat/completions' from origin 'http://localhost:5173' has been blocked by CORS policy: Request header field authorization is not allowed by Access-Control-Allow-Headers in preflight response.

I am following the instructions here: https://github.com/ollama/ollama/blob/main/docs/openai.md

@ewantindale commented on GitHub (May 3, 2024): > @ewantindale the `x-stainless` headers are from the OpenAI SDK, you have to replace how it handles headers internally as a workaround: > > ```ts > class NoStainlessOpenAI extends OpenAI { > defaultHeaders(opts: FinalRequestOptions) { > return { > Accept: 'application/json', > 'Content-Type': 'application/json', > ...this.authHeaders(opts), > }; > } > } > ``` Thanks, fixed that issue but now I get `Access to fetch at 'http://localhost:11434/v1/chat/completions' from origin 'http://localhost:5173' has been blocked by CORS policy: Request header field authorization is not allowed by Access-Control-Allow-Headers in preflight response.` I am following the instructions here: https://github.com/ollama/ollama/blob/main/docs/openai.md

GiteaMirror commented

2026-04-12 09:50:42 -05:00

@spaceemotion commented on GitHub (May 3, 2024):

@ewantindale you can just remove this line from the extended class:

      ...this.authHeaders(opts),

@spaceemotion commented on GitHub (May 3, 2024): @ewantindale you can just remove this line from the extended class: ```ts ...this.authHeaders(opts), ```

GiteaMirror commented

2026-04-12 09:50:42 -05:00

@j2l commented on GitHub (May 4, 2024):

Same issue on FF on ubuntu, but working with Chromium.
I'd love to use this on FF.

@j2l commented on GitHub (May 4, 2024): Same issue on FF on ubuntu, but working with Chromium. I'd love to use this on FF.

GiteaMirror commented

2026-04-12 09:50:42 -05:00

@LoopControl commented on GitHub (May 7, 2024):

Same issue here. User agent header should be allowed in CORS for Ollama.

Without it, it makes the CORS support basically useless in Ollama since almost every client sends a user-agent header.

@LoopControl commented on GitHub (May 7, 2024): Same issue here. User agent header should be allowed in CORS for Ollama. Without it, it makes the CORS support basically useless in Ollama since almost every client sends a user-agent header.

GiteaMirror commented

2026-04-12 09:50:43 -05:00

@mholtzhausen commented on GitHub (May 7, 2024):

Same issue -- I cant use a very useful web-based chatui with ollama running locally because the webui sets the authorization header, and ollama won't allow it -- why not?

@mholtzhausen commented on GitHub (May 7, 2024): Same issue -- I cant use a very useful web-based chatui with ollama running locally because the webui sets the authorization header, and ollama won't allow it -- why not?

GiteaMirror commented

2026-04-12 09:50:43 -05:00

@whinc commented on GitHub (Jan 20, 2025):

alternative solution: start a nginx server as a proxy to ollama server, then you can configure cors in nginx leaving ollama server untouched.

request chain: browser -> nginx proxy -> ollama server

nginx conf

server {
    listen 8080;
    server_name <your_domain>;

    location /api {
        # keep host same as ollama server to avoid cors
        proxy_set_header Host '127.0.0.1';
        # hide origin to avoid ollama server response 403
        proxy_set_header Origin '';

        if ($request_method = 'OPTIONS') {
            add_header 'Access-Control-Allow-Origin' "$cors_origin";
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with';
           # uncomment if you request include credentials
            #add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Content-Type' 'text/plain charset=UTF-8';
            add_header 'Content-Length' 0;
            return 204;
        }

        if ($cors_origin) {
            add_header 'Access-Control-Allow-Origin' "$cors_origin";
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with';
            #add_header 'Access-Control-Allow-Credentials' 'true';
        }
        proxy_pass http://localhost:11434;
    }
}

@whinc commented on GitHub (Jan 20, 2025): alternative solution: start a nginx server as a proxy to ollama server, then you can configure cors in nginx leaving ollama server untouched. request chain: browser -> nginx proxy -> ollama server nginx conf ``` server { listen 8080; server_name <your_domain>; location /api { # keep host same as ollama server to avoid cors proxy_set_header Host '127.0.0.1'; # hide origin to avoid ollama server response 403 proxy_set_header Origin ''; if ($request_method = 'OPTIONS') { add_header 'Access-Control-Allow-Origin' "$cors_origin"; add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with'; # uncomment if you request include credentials #add_header 'Access-Control-Allow-Credentials' 'true'; add_header 'Access-Control-Max-Age' 1728000; add_header 'Content-Type' 'text/plain charset=UTF-8'; add_header 'Content-Length' 0; return 204; } if ($cors_origin) { add_header 'Access-Control-Allow-Origin' "$cors_origin"; add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with'; #add_header 'Access-Control-Allow-Credentials' 'true'; } proxy_pass http://localhost:11434; } } ```

GiteaMirror commented

2026-04-12 09:50:43 -05:00

@mmar58 commented on GitHub (Jan 26, 2025):

Hi, I found a solution. We can use a node js middle man. Who will receive prompt through the api and send ollama stream response.
I created a node project https://github.com/mmar58/Ollama-Global-API for this reason. You guys can also try it. It allows you to access ollama through any network on any device thought the api.

@mmar58 commented on GitHub (Jan 26, 2025): Hi, I found a solution. We can use a node js middle man. Who will receive prompt through the api and send ollama stream response. I created a node project https://github.com/mmar58/Ollama-Global-API for this reason. You guys can also try it. It allows you to access ollama through any network on any device thought the api.

GiteaMirror commented

2026-04-12 09:50:43 -05:00

@whinc commented on GitHub (Feb 6, 2025):

alternative solution: start a nginx server as a proxy to ollama server, then you can configure cors in nginx leaving ollama server untouched.

request chain: browser -> nginx proxy -> ollama server

nginx conf

server {
    listen 8080;
    server_name <your_domain>;

    location /api {
        # keep host same as ollama server to avoid cors
        proxy_set_header Host '127.0.0.1';
        # hide origin to avoid ollama server response 403
        proxy_set_header Origin '';

        if ($request_method = 'OPTIONS') {
            add_header 'Access-Control-Allow-Origin' "$cors_origin";
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with';
           # uncomment if you request include credentials
            #add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Content-Type' 'text/plain charset=UTF-8';
            add_header 'Content-Length' 0;
            return 204;
        }

        if ($cors_origin) {
            add_header 'Access-Control-Allow-Origin' "$cors_origin";
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with';
            #add_header 'Access-Control-Allow-Credentials' 'true';
        }
        proxy_pass http://localhost:11434;
    }
}

Oh my! It turns out that ollama serve natively supports setting cross-origin configuration, you just need to set an environment variable.

$ollama serve --help
......
Environment Variables:                                                         [0/1195]
      OLLAMA_DEBUG               Show additional debug information (e.g. OLLAMA_DEBUG=1)     
      OLLAMA_HOST                IP Address for the ollama server (default 127.0.0.1:11434)
      OLLAMA_KEEP_ALIVE          The duration that models stay loaded in memory (default "5m")       
      OLLAMA_MAX_LOADED_MODELS   Maximum number of loaded models per GPU              
      OLLAMA_MAX_QUEUE           Maximum number of queued requests                    
      OLLAMA_MODELS              The path to the models directory                     
      OLLAMA_NUM_PARALLEL        Maximum number of parallel requests                  
      OLLAMA_NOPRUNE             Do not prune model blobs on startup                  
      OLLAMA_ORIGINS             A comma separated list of allowed origins   👈 👈 👈           
      OLLAMA_SCHED_SPREAD        Always schedule model across all GPUs                
                                                                                       
      OLLAMA_FLASH_ATTENTION     Enabled flash attention                              
      OLLAMA_KV_CACHE_TYPE       Quantization type for the K/V cache (default: f16)    
      OLLAMA_LLM_LIBRARY         Set LLM library to bypass autodetection              
      OLLAMA_GPU_OVERHEAD        Reserve a portion of VRAM per GPU (bytes)            
      OLLAMA_LOAD_TIMEOUT        How long to allow model loads to stall before giving up (default "5m")

@whinc commented on GitHub (Feb 6, 2025): > alternative solution: start a nginx server as a proxy to ollama server, then you can configure cors in nginx leaving ollama server untouched. > > request chain: browser -> nginx proxy -> ollama server > > nginx conf > > ``` > server { > listen 8080; > server_name <your_domain>; > > location /api { > # keep host same as ollama server to avoid cors > proxy_set_header Host '127.0.0.1'; > # hide origin to avoid ollama server response 403 > proxy_set_header Origin ''; > > if ($request_method = 'OPTIONS') { > add_header 'Access-Control-Allow-Origin' "$cors_origin"; > add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; > add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with'; > # uncomment if you request include credentials > #add_header 'Access-Control-Allow-Credentials' 'true'; > add_header 'Access-Control-Max-Age' 1728000; > add_header 'Content-Type' 'text/plain charset=UTF-8'; > add_header 'Content-Length' 0; > return 204; > } > > if ($cors_origin) { > add_header 'Access-Control-Allow-Origin' "$cors_origin"; > add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; > add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization, x-requested-with'; > #add_header 'Access-Control-Allow-Credentials' 'true'; > } > proxy_pass http://localhost:11434; > } > } > ``` Oh my! It turns out that `ollama serve` natively supports setting cross-origin configuration, you just need to set an environment variable. ```bash $ollama serve --help ...... Environment Variables: [0/1195] OLLAMA_DEBUG Show additional debug information (e.g. OLLAMA_DEBUG=1) OLLAMA_HOST IP Address for the ollama server (default 127.0.0.1:11434) OLLAMA_KEEP_ALIVE The duration that models stay loaded in memory (default "5m") OLLAMA_MAX_LOADED_MODELS Maximum number of loaded models per GPU OLLAMA_MAX_QUEUE Maximum number of queued requests OLLAMA_MODELS The path to the models directory OLLAMA_NUM_PARALLEL Maximum number of parallel requests OLLAMA_NOPRUNE Do not prune model blobs on startup OLLAMA_ORIGINS A comma separated list of allowed origins 👈 👈 👈 OLLAMA_SCHED_SPREAD Always schedule model across all GPUs OLLAMA_FLASH_ATTENTION Enabled flash attention OLLAMA_KV_CACHE_TYPE Quantization type for the K/V cache (default: f16) OLLAMA_LLM_LIBRARY Set LLM library to bypass autodetection OLLAMA_GPU_OVERHEAD Reserve a portion of VRAM per GPU (bytes) OLLAMA_LOAD_TIMEOUT How long to allow model loads to stall before giving up (default "5m") ```

GiteaMirror commented

2026-04-12 09:50:44 -05:00

@LoopControl commented on GitHub (Feb 6, 2025):

Oh my! It turns out that ollama serve natively supports setting cross-origin configuration, you just need to set an environment variable.

If you read the above replies, you can see that was already mentioned but even with that environment variable enabled, ollama still denies some headers which is the issue.

@LoopControl commented on GitHub (Feb 6, 2025): > Oh my! It turns out that `ollama serve` natively supports setting cross-origin configuration, you just need to set an environment variable. If you read the above replies, you can see that was already mentioned but even with that environment variable enabled, ollama still denies some headers which is the issue.

GiteaMirror commented

2026-04-12 09:50:44 -05:00

@whinc commented on GitHub (Feb 6, 2025):

Oh my! It turns out that ollama serve natively supports setting cross-origin configuration, you just need to set an environment variable.

If you read the above replies, you can see that was already mentioned but even with that environment variable enabled, ollama still denies some headers which is the issue.

Oh, yes. Ollama can only set the "origin", and currently does not support setting other "access-control-*" headers. It still needs to rely on Nginx or other proxy services to achieve this.

@whinc commented on GitHub (Feb 6, 2025): > > > Oh my! It turns out that `ollama serve` natively supports setting cross-origin configuration, you just need to set an environment variable. > > If you read the above replies, you can see that was already mentioned but even with that environment variable enabled, ollama still denies some headers which is the issue. Oh, yes. Ollama can only set the "origin", and currently does not support setting other "access-control-*" headers. It still needs to rely on Nginx or other proxy services to achieve this.

GiteaMirror commented

2026-04-12 09:50:45 -05:00

@z4none commented on GitHub (Feb 18, 2025):

first set OLLAMA_ORIGINS environment variable when starting the ollama process，
for example:

OLLAMA_ORIGINS=http://*

then in js:

const client = new OpenAI({
  apiKey: 'ollama',
  baseURL: 'http://localhost:11434/v1',
  dangerouslyAllowBrowser: true,
  defaultHeaders: {
    'x-stainless-retry-count': null,
    'x-stainless-timeout': null,
  },
});

@z4none commented on GitHub (Feb 18, 2025): first set OLLAMA_ORIGINS environment variable when starting the ollama process， for example: ``` OLLAMA_ORIGINS=http://* ``` then in js: ``` const client = new OpenAI({ apiKey: 'ollama', baseURL: 'http://localhost:11434/v1', dangerouslyAllowBrowser: true, defaultHeaders: { 'x-stainless-retry-count': null, 'x-stainless-timeout': null, }, }); ```

GiteaMirror referenced this issue

2026-04-12 23:03:15 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #10560

GiteaMirror referenced this issue

2026-04-16 05:09:52 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #15831

GiteaMirror referenced this issue

2026-04-19 15:26:33 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #21100

GiteaMirror referenced this issue

2026-04-22 01:44:22 -05:00

[GH-ISSUE #300] Provide a way to allow connections to Ollama from web browser origins other than `localhost` and `0.0.0.0` #25896

GiteaMirror referenced this issue

2026-04-22 21:05:31 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #36433

GiteaMirror referenced this issue

2026-04-24 21:37:48 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #41808

GiteaMirror referenced this issue

2026-04-27 23:18:14 -05:00

[GH-ISSUE #300] Provide a way to allow connections to Ollama from web browser origins other than `localhost` and `0.0.0.0` #46645

GiteaMirror referenced this issue

2026-04-29 11:50:27 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #57257

GiteaMirror referenced this issue

2026-05-03 07:44:20 -05:00

[GH-ISSUE #300] Provide a way to allow connections to Ollama from web browser origins other than `localhost` and `0.0.0.0` #62172

GiteaMirror referenced this issue

2026-05-05 04:25:37 -05:00

[PR #1357] [CLOSED] Adding Cross-Origin Support for Web Apps #72854

Sign in to join this conversation.

Branches Tags

main

hoyyeva/anthropic-local-image-path

dhiltgen/ci

dhiltgen/llama-runner

parth-remove-claude-desktop-launch

hoyyeva/anthropic-reference-images-path

parth-anthropic-reference-images-path

brucemacd/download-before-remove

hoyyeva/editor-config-repair

parth-mlx-decode-checkpoints

parth-launch-codex-app

hoyyeva/fix-codex-model-metadata-warning

hoyyeva/qwen

parth/hide-claude-desktop-till-release

hoyyeva/opencode-image-modality

parth-add-claude-code-autoinstall

release_v0.22.0

pdevine/manifest-list

codex/fix-codex-model-metadata-warning

pdevine/addressable-manifest

brucemacd/launch-fetch-reccomended

jmorganca/llama-compat

launch-copilot-cli

hoyyeva/opencode-thinking

release_v0.20.7

parth-auto-save-backup

parth-test

jmorganca/gemma4-audio-replacements

fix-manifest-digest-on-pull

hoyyeva/vscode-improve

brucemacd/install-server-wait

parth/update-claude-docs

brucemac/start-ap-install

pdevine/mlx-update

pdevine/qwen35_vision

drifkin/api-show-fallback

mintlify/image-generation-1773352582

hoyyeva/server-context-length-local-config

jmorganca/faster-reptition-penalties

jmorganca/convert-nemotron

parth-pi-thinking

pdevine/sampling-penalties

jmorganca/fix-create-quantization-memory

dongchen/resumable_transfer_fix

pdevine/sampling-cache-error

jessegross/mlx-usage

hoyyeva/openclaw-config

hoyyeva/app-html

pdevine/qwen3next

brucemacd/sign-sh-install

brucemacd/tui-update

brucemacd/usage-api

jmorganca/launch-empty

fix-app-dist-embed

mxyng/mlx-compile

mxyng/mlx-quant

mxyng/mlx-glm4.7

mxyng/mlx

brucemacd/simplify-model-picker

jmorganca/qwen3-concurrent

fix-glm-4.7-flash-mla-config

drifkin/qwen3-coder-opening-tag

brucemacd/usage-cli

fix-cuda12-fattn-shmem

ollama-imagegen-docs

parth/fix-multiline-inputs

brucemacd/config-docs

mxyng/model-files

mxyng/simple-execute

fix-imagegen-ollama-models

mxyng/async-upload

jmorganca/lazy-no-dtype-changes

imagegen-auto-detect-create

parth/decrease-concurrent-download-hf

fix-mlx-quantize-init

jmorganca/x-cleanup

usage

imagegen-readme

jmorganca/glm-image

mlx-gpu-cd

jmorganca/imagegen-modelfile

parth/agent-skills

parth/agent-allowlist

parth/signed-in-offline

parth/agents

parth/fix-context-chopping

improve-cloud-flow

parth/add-models-websearch

parth/prompt-renderer-mcp

jmorganca/native-settings

jmorganca/download-stream-hash

jmorganca/client2-rebased

brucemacd/oai-chat-req-multipart

jessegross/multi_chunk_reserve

grace/additional-omit-empty

grace/mistral-3-large

mxyng/tokenizer2

mxyng/tokenizer

jessegross/flash

hoyyeva/windows-nacked-app

mxyng/cleanup-attention

grace/deepseek-parser

hoyyeva/remember-unsent-prompt

parth/add-lfs-pointer-error-conversion

parth/olmo2-test2

hoyyeva/ollama-launchagent-plist

nicole/olmo-model

parth/olmo-test

mxyng/remove-embedded

parth/render-template

jmorganca/intellect-3

parth/remove-prealloc-linter

jmorganca/cmd-eval

nicole/nomic-embed-text-fix

mxyng/lint-2

hoyyeva/add-gemini-3-pro-preview

hoyyeva/load-model-list

mxyng/expand-path

mxyng/environ-2

hoyyeva/deeplink-json-encoding

parth/improve-tool-calling-tests

hoyyeva/conversation

hoyyeva/assistant-edit-response

hoyyeva/thinking

origin/brucemacd/invalid-char-i-err

parth/improve-tool-calling

jmorganca/required-omitempty

grace/qwen3-vl-tests

mxyng/iter-client

parth/docs-readme

nicole/embed-test

pdevine/integration-benchstat

parth/remove-generate-cmd

parth/add-toolcall-id

mxyng/server-tests

jmorganca/glm-4.6

jmorganca/gin-h-compat

drifkin/stable-tool-args

pdevine/qwen3-more-thinking

parth/add-websearch-client

nicole/websearch_local

jmorganca/qwen3-coder-updates

grace/deepseek-v3-migration-tests

mxyng/fix-create

jmorganca/cloud-errors

pdevine/parser-tidy

revert-12233-parth/simplify-entrypoints-runner

parth/enable-so-gpt-oss

brucemacd/qwen3vl

jmorganca/readme-simplify

parth/gpt-oss-structured-outputs

revert-12039-jmorganca/tools-braces

mxyng/embeddings

mxyng/gguf

mxyng/benchmark

mxyng/types-null

parth/move-parsing

mxyng/gemma2

jmorganca/docs

mxyng/16-bit

mxyng/create-stdin

pdevine/authorizedkeys

mxyng/quant

parth/opt-in-error-context-window

brucemacd/cache-models

brucemacd/runner-completion

jmorganca/llama-update-6

brucemacd/benchmark-list

brucemacd/partial-read-caps

parth/deepseek-r1-tools

mxyng/omit-array

parth/tool-prefix-temp

brucemacd/runner-test

jmorganca/qwen25vl

brucemacd/model-forward-test-ext

parth/python-function-parsing

jmorganca/cuda-compression-none

drifkin/num-parallel

drifkin/chat-truncation-fix

jmorganca/sync

parth/python-tools-calling

drifkin/array-head-count

brucemacd/create-no-loop

parth/server-enable-content-stream-with-tools

qwen25omni

mxyng/v3

brucemacd/ropeconfig

jmorganca/silence-tokenizer

parth/sample-so-test

parth/sampling-structured-outputs

brucemacd/doc-go-engine

parth/constrained-sampling-json

jmorganca/mistral-wip

brucemacd/mistral-small-convert

parth/sample-unmarshal-json-for-params

brucemacd/jomorganca/mistral

pdevine/bfloat16

jmorganca/mistral

brucemacd/mistral

pdevine/logging

parth/sample-correctness-fix

parth/sample-fix-sorting

jmorgan/sample-fix-sorting-extras

jmorganca/temp-0-images

brucemacd/parallel-embed-models

brucemacd/shim-grammar

jmorganca/fix-gguf-error

bmizerany/nameswork

jmorganca/faster-releases

bmizerany/validatenames

brucemacd/err-no-vocab

brucemacd/rope-config

brucemacd/err-hint

brucemacd/qwen2_5

brucemacd/logprobs

brucemacd/new_runner_graph_bench

progress-flicker

brucemacd/forward-test

brucemacd/go_qwen2

pdevine/gemma2

jmorganca/add-missing-symlink-eval

mxyng/next-debug

parth/set-context-size-openai

brucemacd/next-bpe-bench

brucemacd/next-bpe-test

brucemacd/new_runner_e2e

brucemacd/new_runner_qwen2

pdevine/convert-cohere2

brucemacd/convert-cli

parth/log-probs

mxyng/next-mlx

mxyng/cmd-history

parth/templating

parth/tokenize-detokenize

brucemacd/check-key-register

bmizerany/grammar

jmorganca/vendor-081b29bd

mxyng/func-checks

jmorganca/fix-null-format

parth/fix-default-to-warn-json

jmorganca/qwen2vl

jmorganca/no-concat

parth/cmd-cleanup-SO

brucemacd/check-key-register-structured-err

parth/openai-stream-usage

parth/fix-referencing-so

stream-tools-stop

jmorganca/degin-1

brucemacd/install-path-clean

brucemacd/push-name-validation

brucemacd/browser-key-register

jmorganca/openai-fix-first-message

jmorganca/fix-proxy

jessegross/sample

parth/disallow-streaming-tools

dhiltgen/remove_submodule

jmorganca/ga

jmorganca/mllama

pdevine/newlines

pdevine/geems-2b

jmorganca/llama-bump

mxyng/modelname-7

mxyng/gin-slog

mxyng/modelname-6

jyan/convert-prog

jyan/quant5

paligemma-support

pdevine/import-docs

jmorganca/openai-context

jyan/paligemma

jyan/p2

jyan/palitest

bmizerany/embedspeedup

jmorganca/llama-vit

brucemacd/allow-ollama

royh/ep-methods

royh/whisper

mxyng/api-models

mxyng/fix-memory

jyan/q4_4/8

jyan/ollama-v

royh/stream-tools

roy-embed-parallel

bmizerany/hrm

revert-5963-revert-5924-mxyng/llama3.1-rope

royh/embed-viz

jyan/local2

jyan/auth

jyan/local

jyan/parse-temp

jmorganca/template-mistral

jyan/reord-g

royh-openai-suffixdocs

royh-imgembed

royh-embed-parallel

jyan/quant4

royh-precision

jyan/progress

pdevine/fix-template

jyan/quant3

pdevine/ggla

mxyng/update-registry-domain

jmorganca/ggml-static

mxyng/create-context

jyan/v0.146

mxyng/layers-from-files

build_dist

bmizerany/noseek

royh-ls

royh-name

timeout

mxyng/server-timestamp

bmizerany/nosillyggufslurps

royh-params

jmorganca/llama-cpp-7c26775

royh-openai-delete

royh-show-rigid

jmorganca/enable-fa

jmorganca/no-error-template

jyan/format

royh-testdelete

bmizerany/fastverify

language_support

pdevine/ps-glitches

brucemacd/tokenize

bruce/iq-quants

bmizerany/filepathwithcoloninhost

mxyng/split-bin

bmizerany/client-registry

jmorganca/if-none-match

native

jmorganca/native

jmorganca/batch-embeddings

jmorganca/initcmake

jmorganca/mm

pdevine/showggmlinfo

modenameenforcealphanum

bmizerany/modenameenforcealphanum

jmorganca/done-reason

jmorganca/llama-cpp-8960fe8

ollama.com

bmizerany/filepathnobuild

bmizerany/types/model/defaultfix

rmdisplaylong

nogogen

bmizerany/x

modelfile-readme

bmizerany/replacecolon

jmorganca/limit

jmorganca/execstack

jmorganca/replace-assets

mxyng/tune-concurrency

jmorganca/testing

whitespace-detection

jmorganca/options

upgrade-all

scratch

cuda-search

mattw/airenamer

mattw/allmodelsonhuggingface

mattw/quantcontext

mattw/whatneedstorun

brucemacd/llama-mem-calc

mattw/faq-context

mattw/communitylinks

mattw/noprune

mattw/python-functioncalling

rename

mxyng/install

pulse

remove-first

editor

mattw/selfqueryingretrieval

cgo

mattw/howtoquant

api

matt/streamingapi

format-config

mxyng/extra-args

shell

update-nous-hermes

cp-model

upload-progress

fix-unknown-model

fix-model-names

delete-fix

insecure-registry

ls

deletemodels

progressbar

readme-updates

license-layers

skip-list

list-models

modelpath

matt/examplemodelfiles

distribution

go-opts

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/ollama#300