Your AI Wrote a CORS Config That Lets Any Website Read Your API

TL;DR AI assistants default to Access-Control-Allow-Origin: * — a wildcard that opens...