Gate local Gemma behind explicit terms acceptance

2026-10-19 12:03:51 +02:00
parent bb317a9366
commit b57c4c075f
6 changed files with 93 additions and 3 deletions
@@ -18,6 +18,8 @@ self.fetch = async (resource, options) => {
  const requestedUrl = resource instanceof Request ? resource.url : String(resource);
  const localModelUrl = localPiperModelUrl(requestedUrl, self.location.origin);
  if (!localModelUrl) {
+    const requestUrl = new URL(requestedUrl, self.location.origin);
+    if (requestUrl.origin !== self.location.origin) throw new Error(`External Piper asset blocked: ${requestUrl.origin}`);
    const runtimeAsset = requestedUrl.includes('/static/piper-wasm-v1/onnx/');
    const runtimeFile = runtimeAsset ? new URL(requestedUrl, self.location.origin).pathname.split('/').pop() : undefined;
    if (activeRequestId && runtimeAsset) {