I removed this under the impression the default was to allow it anywhere but that's not the case. Since the service worker was already registered in my browser I never got the error during testing.
It was checking the request path but for tars the path is in the query variable so the request path is irrelevant.
app
routes