| Source | Azure Portal | ||||||||||||||
| Display name | App Service app slots should not have CORS configured to allow every resource to access your apps | ||||||||||||||
| Id | cae7c12e-764b-4c87-841a-fdc6675d196f | ||||||||||||||
| Version | 1.0.0 Details on versioning |
||||||||||||||
| Versioning |
Versions supported for Versioning: 1 1.0.0 Built-in Versioning [Preview] |
||||||||||||||
| Category | App Service Microsoft Learn |
||||||||||||||
| Description | Cross-Origin Resource Sharing (CORS) should not allow all domains to access your app. Allow only required domains to interact with your app. | ||||||||||||||
| Mode | Indexed | ||||||||||||||
| Type | BuiltIn | ||||||||||||||
| Preview | False | ||||||||||||||
| Deprecated | False | ||||||||||||||
| Effect | Default AuditIfNotExists Allowed AuditIfNotExists, Disabled |
||||||||||||||
| RBAC role(s) | none | ||||||||||||||
| Rule aliases | THEN-ExistenceCondition (1)
|
||||||||||||||
| Rule resource types | IF (1) Microsoft.Web/sites/slots |
||||||||||||||
| Compliance | Not a Compliance control | ||||||||||||||
| Initiatives usage |
|
||||||||||||||
| History |
|
||||||||||||||
| JSON compare | n/a | ||||||||||||||
| JSON |
|