[GH-ISSUE #4646] [bug]: Cannot register Hoppscotch agent running on macOS with hoppscotch.io opened in Safari #1720

New issue

Open

opened 2026-03-16 21:31:56 +03:00 by kerem · 2 comments

kerem commented

2026-03-16 21:31:56 +03:00

Owner

Originally created by @dieselpower on GitHub (Dec 25, 2024).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4646

Is there an existing issue for this?

I have searched the existing issues

Current behavior

Safari gives an error "XMLHttpRequest cannot load http://localhost:9119/handshake due to access control checks" while attempting to register hoppscotch.io with running Hoppscotch Agent on macOS. If I use Chrome on the same Mac - agent registration works well.
The same issue occurs with the self-hosted community edition.

Steps to reproduce

Macos Sequoia, Safari 18.2, hoppscotch agent v. 0.1.3

Launch Hoppscotch Agent
Launch Safari and open Web Inspector from Develop menu
Open hoppscotch.io and choose agent as an interceptor - "Agent not detected" on a page, "XMLHttpRequest cannot load http://localhost:9119/handshake due to access control checks" in Web Inspector
Launch Chrome, open hoppscotch.io, choose agent as an interceptor - agent registration process starts, code shows and so on.

We should use agent for mitigating CORS problems, but we cannot connect to agent on Safari because of CORS :)

Environment

Production

Version

Cloud

Originally created by @dieselpower on GitHub (Dec 25, 2024). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4646 ### Is there an existing issue for this? - [X] I have searched the existing issues ### Current behavior Safari gives an error "XMLHttpRequest cannot load http://localhost:9119/handshake due to access control checks" while attempting to register hoppscotch.io with running Hoppscotch Agent on macOS. If I use Chrome on the same Mac - agent registration works well. The same issue occurs with the self-hosted community edition. ### Steps to reproduce Macos Sequoia, Safari 18.2, hoppscotch agent v. 0.1.3 1. Launch Hoppscotch Agent 2. Launch Safari and open Web Inspector from Develop menu 3. Open hoppscotch.io and choose agent as an interceptor - "Agent not detected" on a page, "XMLHttpRequest cannot load http://localhost:9119/handshake due to access control checks" in Web Inspector 4. Launch Chrome, open hoppscotch.io, choose agent as an interceptor - agent registration process starts, code shows and so on. We should use agent for mitigating CORS problems, but we cannot connect to agent on Safari because of CORS :) ### Environment Production ### Version Cloud

kerem added the

bug

need testing

labels

2026-03-16 21:31:56 +03:00

kerem commented

2026-03-16 21:32:07 +03:00

Author

Owner

@shinigota commented on GitHub (Dec 4, 2025):

Hello !

I'm facing the same issue with a self-hosted community instance in my company.
We have multiple users reporting the exact same problem with the agent, on Ubuntu, Windows using Firefox and Chrome.

@dieselpower have you found any work around since ?

EDIT : got it resolved !
It turns out we had some new company policies regarding the security config in the reverse proxy.
A very restrictive Content-Security-Policy header was added which blocked all the calls to the agent.
The CSP configuration was simply made more lenient and everything works again !

@shinigota commented on GitHub (Dec 4, 2025): Hello ! I'm facing the same issue with a self-hosted community instance in my company. We have multiple users reporting the exact same problem with the agent, on Ubuntu, Windows using Firefox and Chrome. @dieselpower have you found any work around since ? EDIT : got it resolved ! It turns out we had some new company policies regarding the security config in the reverse proxy. A very restrictive Content-Security-Policy header was added which blocked all the calls to the agent. The CSP configuration was simply made more lenient and everything works again !

kerem commented

2026-03-16 21:32:12 +03:00

Author

Owner

@dieselpower commented on GitHub (Dec 4, 2025):

Hello!

Your case differs from my.
In my case agent registers in Chrome, but it doesn't work in Safari.

@dieselpower commented on GitHub (Dec 4, 2025): Hello! Your case differs from my. In my case agent registers in Chrome, but it doesn't work in Safari.

kerem referenced this issue

2026-03-17 01:04:32 +03:00

[PR #1720] [MERGED] refactor: modals #3465