Microsoft Enhances Entra ID Security Against Script Injection Attacks

Microsoft is implementing security enhancements to its Entra ID authentication system to protect against external script injection attacks. Starting in mid-to-late October 2026, the updated Content Security Policy will restrict script downloads and inline executions to only those from Microsoft-trusted sources. This measure aims to safeguard users from various security risks, including cross-site scripting attacks.