Why Cursor Writes IDOR Into Your API Routes (CWE-639)

· Dev.to