feat(arm): add FunctionAppDisallowCORS - password correctness check

[unu87]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

This code defines an Azure security check to prevent Function Apps from allowing access from all regions by inspecting the CORS configuration.

Fixes # (issue)
The issue can be fixed by explicitly specifying allowed origins instead of using "*" in the CORS configuration.

Description

Include a description of what makes it a violation and any relevant external links.

Fix

How does someone fix the issue in code and/or in runtime?

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[ChanochShayner]

Amazing 💯