From 52ba53bec444b17f4758f6b6c15200aeb5c5a42e Mon Sep 17 00:00:00 2001
From: "thomas.kopp" <thomas.kopp@tueit.de>
Date: Wed, 1 Apr 2026 20:51:23 +0200
Subject: [PATCH] fix: validate Ollama URL protocol before fetching api/tags

---
 frontend/settings.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/frontend/settings.js b/frontend/settings.js
index b5fbcff..23349b7 100644
--- a/frontend/settings.js
+++ b/frontend/settings.js
@@ -36,7 +36,9 @@ async function loadDevices() {
 
 async function loadOllamaModels(baseUrl, current) {
   try {
-    const r = await fetch(baseUrl + '/api/tags');
+    const parsed = new URL(baseUrl);
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') return;
+    const r = await fetch(parsed.origin + '/api/tags');
     if (!r.ok) return;
     const data = await r.json();
     const sel = document.getElementById('ollama-model');