Update main.py

main.py

@@ -56,6 +56,10 @@ app.add_middleware(
 
 @app.post("/generate/")
 async def generate(request: Request):
+    allowed_origin = "https://artixiban-ll3.static.hf.space"
+    origin = request.headers.get("origin")
+    if origin != allowed_origin:
+        raise HTTPException(status_code=403, detail="Origin not allowed")
     form = await request.form()
     prompt = form.get("prompt")
     history = json.loads(form.get("history", "[]"))  # Default to empty history