I think a really high value is fine. How often are you really changing CORS access parameters? If you're developing and making a CORS change, you can clear the browser's cache manually. I think something like 20 or 30 days is fine. If that feels too long, even a week (7 days) would be good.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira