services / Azure / Azure Static Web App

An Azure Static Web App (Static Site) is a managed hosting resource that serves a public-facing static frontend with linked source-repository/CI build configuration and optional managed serverless API (Azure Functions) backend.

Asset hosts a single public-facing web application; its app settings and deployment tokens routinely contain secrets and connection strings, making secret-returning operations effectively credential disclosure.

Microsoft.​Web/​staticSites/​validateCustomDomainOwnership/​action

Validates custom domain ownership, the gating step that binds a custom domain to the static site, enabling an attacker to route a domain/subdomain to attacker-controlled content.

Risks

1. Domain takeover (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links