Block access to credential files (*.env, *.env.local) to prevent AI exposure

but only with a specific .cursorignore. NOT by default (which it should!)

1 Like