Microsoft docs state "Your custom functions will have full CORS support." when running in a shared runtime. see https://docs.microsoft.com/en-us/office/dev/add-ins/exc