BIG SECURITY RISK! .cursorignore doesn't seem to work, .envs files being sent as context

[wbtacc]

• While a ‘.cursorignore’ file can prevent files from being indexed, those files may still be included in AI requests, such as if you recently viewed a file and then ask a question in the chat. […]

— Security | Cursor - The AI-first Code Editor

I think what defines “recently viewed files” is unclear, and that a warning should occur before use of a “recently used file” if it is .gitignore-d or .cursorignor-d.

I raise related security concerns in Security Concerns with .gitignore, .cursorignore, .cursorban .