Very helpful, thank you!

However, this comment in web.config:

The X-Permitted-Cross-Domain-Policies header tells clients like Flash and Acrobat what cross-domain policies they can use. If you don’t want them to load data from your domain, set the header’s value to none

Made my app service stop with HTTP 500. I had to remove both apostrophes for it to work.

Any idea how to remove the server name from python based app service. I tried this https://stackoverflow.com/q... but didn't worked out.