Why Cursor Generates Wildcard CORS in Every Express App

TL;DR Cursor almost always outputs cors() or cors({ origin: '*' }) with no origin...