Perform the following in the Azure Console:

1. Login to Azure Portal using https://portal.azure.com
2. Go to App Services
3. Click on each App
4. Click on API settings
5. In Allowed region there should not be *”.Specify the origins that should be allowed to make cross-origin calls

Perform the following in Azure Command Line Interface 2.0:

To review the origins that should be allowed to make cross-origin calls, run the following command.

az webapp cors show –name MyWebApp –resource-group MyResourceGroup

To remove the origin with ‘*’,run the command

az webapp cors remove -g {myRG} -n {myAppName} –allowed-origins *

1. https://docs.microsoft.com/en-us/cli/azure/webapp/cors?view=azure-cli-latest