Why Cursor Keeps Writing Wildcard CORS Into Your Express API

TL;DR Cursor consistently generates cors() with no config -- equivalent to origin:...