Package com.atlassian.jira.rest


package com.atlassian.jira.rest

CORS

Many resources can be used with CORS, so that they are available from other websites.

It's an opt-in mechanism. To allow a resource to be used with CORS, we have to annotate its package, class or method with CorsAllowed.

For security reasons, some resources should not be CORS allowed. For example user should be only allowed to change their Jira password through the Jira's interface, rather than by accessing some 3rd party, potentially malicious, webpage.