Microsoft to Secure Entra ID Sign-ins From Script Injection Attacks

Microsoft will improve Entra ID security against script injection attacks by implementing a new Content Security Policy by October 2026, restricting scripts to trusted domains to prevent unauthorized access.

https://www.bleepingcomputer.com/news/microsoft/microsoft-to-secure-entra-id-sign-ins-from-external-script-injection-attacks/