Proposed mechanism: simple case insensitive pattern with URLs - we just match that every file we download match the whitelist examples: * ALL models ALL VERSIONS from the mozilla organization on hugging face : https://huggingface.co/Mozilla/ * ALL models ALL VERSIONS from our hub: https://model-hub.mozilla.org/ * A specific model ALL VERSIONS https://huggingface.co/typeform/distilbert-base-uncased-mnli/ * A specific model and a specific version https://huggingface.co/Mozilla/distilvit/blob/v0.5.0/
Bug 1925282 Comment 1 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Proposed mechanism: simple case insensitive pattern with URLs - we just match that every file we download match the allow list and is not in the deny list examples of patterns: * ALL models ALL VERSIONS from the mozilla organization on hugging face : https://huggingface.co/Mozilla/ * ALL models ALL VERSIONS from our hub: https://model-hub.mozilla.org/ * A specific model ALL VERSIONS https://huggingface.co/typeform/distilbert-base-uncased-mnli/ * A specific model and a specific version https://huggingface.co/Mozilla/distilvit/blob/v0.5.0/ Each URL is tested and needs to be included in the allowlist and not in the denylist
Proposed mechanism: simple case insensitive pattern with URLs - we just match that every file we download match the allow list and is not in the deny list examples of patterns: * ALL models ALL VERSIONS from the mozilla organization on hugging face : https://huggingface.co/Mozilla/ * ALL models ALL VERSIONS from our hub: https://model-hub.mozilla.org/ * A specific model ALL VERSIONS https://huggingface.co/typeform/distilbert-base-uncased-mnli/ * A specific model and a specific version https://huggingface.co/Mozilla/distilvit/blob/v0.5.0/ Each URL is tested and needs to be included in the allowlist and not in the denylist The remote settings records have 3 fields: - filter: ALLOW or DENY - match: the url to match - description
Proposed mechanism: simple case insensitive pattern with URLs - we just match that every file we download match the allow list and is not in the deny list. This will be enough to handle all cases, from the rogue model or specific version, to blessing a full domain or organization examples of patterns: * ALL models ALL VERSIONS from the mozilla organization on hugging face : https://huggingface.co/Mozilla/ * ALL models ALL VERSIONS from our hub: https://model-hub.mozilla.org/ * A specific model ALL VERSIONS https://huggingface.co/typeform/distilbert-base-uncased-mnli/ * A specific model and a specific version https://huggingface.co/Mozilla/distilvit/blob/v0.5.0/ Each URL is tested and needs to be included in the allowlist and not in the denylist The remote settings records have 3 fields: - filter: ALLOW or DENY - match: the url to match - description