+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update (/showthread.php?tid=6315390)
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update - Stanley - Dec 8, 2025
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update
Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection attacks starting a year from now.
The update to its Content Security Policy (CSP) aims to enhance the Entra ID sign-in experience at "login.microsoftonline[.]com" by only letting scripts from trusted Microsoft domains run.
"This update strengthens security and adds an extra
https://thehackernews.com/2025/11/microsoft-to-block-unauthorized-scripts.html