CORS Configuration with Claude Code: Origin Control and Preflight Optimization

Misconfigured CORS is a security hole — Access-Control-Allow-Origin: * in production lets any site...