Microsoft Is Blocking Every Third-Party Script from Its Entra Sign-In Page — and It Hits Mid-October

Starting in mid-to-late October 2026, Microsoft will enforce Content Security Policy (CSP) on sign-in pages at login.microsoftonline.com. The global rollout, part of the Secure Future Initiative, blocks every script not originating from a…