Browsing: cursor api threat