Does Algolia enable referer restrictions by default on search-only API keys?
Algolia search-only API keys are created without HTTP referer restrictions unless explicitly configured. This opt-in model places the burden on developers to remember adding referer limits in the dashboard or via the Admin API. When omitted, the key can be used from any origin, potentially exposing index data or consuming quota if the key is extracted from c
algolia