From: Sebastian Dröge <redacted>
Date: Thu, 16 Jul 2026 09:26:51 +0000 (+0300)
Subject: server: Ignore empty / non-existing `Origin` headers (#25756)
X-Git-Tag: upstream/0.0.10438~397
X-Git-Url: https://git.djapps.eu/?a=commitdiff_plain;h=8ee54c8b32a1b0cf13c03fc5723142bc62c775f6;p=pkg%2Fggml%2Fsources%2Fllama.cpp

server: Ignore empty / non-existing `Origin` headers (#25756)

Otherwise this gives lots of unnecessary warnings:

  W srv    operator(): (CORS) skip non-localhost origin:
---

diff --git a/tools/server/server-http.cpp b/tools/server/server-http.cpp
index 24a38452a..783b01b82 100644
--- a/tools/server/server-http.cpp
+++ b/tools/server/server-http.cpp
@@ -283,9 +283,9 @@ bool server_http_context::init(const common_params & params) {
         } else if (params.cors_origins == "localhost") {
             // special case: only reflect the Origin header if it is a localhost origin
             std::string origin = req.get_header_value("Origin");
-            if (origin_is_localhost(origin)) {
+            if (!origin.empty() && origin_is_localhost(origin)) {
                 res.set_header("Access-Control-Allow-Origin", origin);
-            } else {
+            } else if (!origin.empty()) {
                 SRV_WRN("(CORS) skip non-localhost origin: %s\n", origin.c_str());
             }
         } else {