[CXF-4167] Configure CORS allowOrigins addresses in XML

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.2
• Fix Version/s: 2.5.3, 2.6
• Component/s: JAX-RS Security

Environment

Any

• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Matt Bishop
• Created: 07/Mar/12 00:01
• Updated: 23/Apr/12 16:45
• Resolved: 12/Mar/12 22:11

Description

CORS support uses annotations exclusively define the shape of the CORS support. For most attributes, this is fine because it needs to be scoped to the methods. However, the actual origin servers needs to be configured in XML as it will likely change over time, and in specific deployments.