How to prevent "Your Functions 3.0 app is up and running" page displaying

Question

Is there a way to prevent the default html page showing when you input the endpoint URL into a browser?

Seems like a major security vulnerability allowing a malicious attacker to easily collate a list of Azure Function endpoint servers, why would we want to provide this information to the entire world when we don't need to?

Answer 1

The app setting AzureWebJobsDisableHomepage controls whether this page should be disabled. The default is false.