AI‑generated backends may run, but they’re riddled with security holes
A Stack Overflow blog post dissects the typical Node/Express code an AI assistant spits out – no payload limits, open CORS, unchecked fetch calls, and unauthenticated routes – proving that “it boots” isn’t enough. The author argues AI tools are incentivized to stop at a passing test and urges safer defaults.