Nuxeo has a new NuxeoHostFilter which is configurable via the nuxeo.allowed.hosts configuration property.
We want to document how nuxeo behaves depending on the value of this property:
-no value: everything
-one or multiple values: classic whitelist
This could be added to "nxdoc > server > REST API" near the CORS page...