I built a browser-based AI news briefing tool.

Link to website

Search any topic or country, and it turns headlines into a short, structured report.

Runs locally in your browser (Llama 3.2 via WebLLM)

No data leaves your device

Includes sources

Desktop browser only for now (mobile is slow).

Looking for feedback on usefulness and accuracy.

Comments

[Amit Feldman]

Nice build — running Llama 3.2 fully on-device via WebLLM is a strong privacy story. I ran a quick health check on news-scope.netlify.app while reading:

Passing: HSTS (max-age=1y, includeSubDomains, preload), TLS 1.3 cert good for 226 days, exactly one H1, clean 200 with no redirect chain.

Worth a look before you promote it further:

1. No Content-Security-Policy — the one I'd fix first for this app specifically. You're rendering model-generated report text into the page; LLM output is untrusted input, and a crafted headline in a source feed could smuggle in markup you don't want executing. A strict baseline like default-src 'self' closes most of that class.
2. X-Frame-Options (clickjacking), X-Content-Type-Options: nosniff, Referrer-Policy, Permissions-Policy — all absent.
3. Meta description missing, and robots.txt + sitemap.xml both 404 — cheap discoverability wins if you want people finding it via search.

On Netlify all five headers are a single deploy: drop a _headers file in your publish directory (or a [[headers]] block in netlify.toml) — no app code change needed.

Happy to run a fuller free scan (timing breakdown, TLS chain, SEO) and send over the report if that's useful — just say the word.