Why Cursor Keeps Generating Wildcard CORS -- And How to Fix It

«TL;DR AI editors almost always default to cors() with no config -- which sets Access-Control-Allow-Origin: * Wildcard CORS on authenticated APIs exposes your users to cross-site request attacks Fix: replace the wildc...»