Microsoft will introduce a new Content Security Policy for Microsoft Entra ID in October 2026. The measure is intended to prevent cross-site scripting.