CORS Wildcard in AI-Generated APIs: What Cursor Gets Wrong

TL;DR AI editors default to cors() with zero config in almost every Express/Fastify...