All the resources of the WebCenter Sites Aggregated REST API are enabled for cross-origin resource sharing (CORS). So you have cross-domain access to these REST resources. This will help developers to build client-side websites hosted on one domain accessing WebCenter Sites content present on another domain through REST.
For more information, see "Cross-Origin Resource Sharing" at http://www.w3.org/TR/cors/.
WebCenter Sites enables you to configure CORS properties at runtime, either through the Sites Property user interface or the import-export utility, without restarting the Managed Server. In all other cases, a server restart is required for the changes to take effect. For configuration information, see "CORS Properties" in the Property Files Reference for Oracle WebCenter Sites. All the CORS-related properties are under the category CORS.