Sébastien Deleuze opened SPR-13097 and commented
Fix combining class and method level @CrossOrigin attributes by keeping current behavior (no origin defined = * for example) but using empty string and empty arrays default values in @CrossOrigin in order to be able to detect if an attribute has been explicitly set by the user or not.
Affects: 4.2 RC1