Microsoft Entra protects against script injection attacks

Microsoft will introduce a new Content Security Policy for Microsoft Entra ID in October 2026. The measure is intended to prevent cross-site scripting.

Microsoft advises organizations not to use browser extensions or…