Microsoft plans to enforce a Content Security Policy (CSP) on browser-based Microsoft Entra ID sign-in pages at login.microsoftonline.com in mid-to-late October 2026. The policy is enabled by default, so tenants do not need to change a setting. Most importantly, extensions and tools that inject scripts into the sign-in page may stop working; Microsoft says users should still be able to sign in.
What is changing, and when?
CSP is a browser security policy that limits which scripts and other resources a page can load. Microsoft says the additional protections are intended to block unauthorized external script injection and provide defense in depth against attacks such as cross-site scripting (XSS).
As an Amazon Associate I earn from qualifying purchases.
Microsoft’s latest surfaced Message Center notice, MC1481309, was published September 28, 2026. It sets a planned worldwide general-availability rollout from mid-October through late October 2026 and lists October 19, 2026 as the “Act by” date. These are Microsoft’s current target dates, not confirmation that rollout has completed. The earlier notice, MC1191924, gave the same rollout window.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Which sign-ins are in scope?
The stated scope is browser-based sign-in at login.microsoftonline.com. The policy is enabled by default, with no tenant configuration required.
#1 Best Overall
- Brilliant Display – Stunning 13.8" PixelSense touchscreen[1], with brilliant LCD display[2], unleashes luminous whites, deeper blacks and colors so richly saturated bringing vivid life into every frame – perfect for work, school, streaming and creative tasks.
- Power that lasts all day – With 20 hours of battery life[3], the new Surface Laptop powers through your entire day, so you can create, work and stream from morning to night without reaching for a charger.
- Work at the speed of your ideas – Built with the latest Qualcomm Snapdragon X2 Elite (12 Core) processors, Surface Laptop delivers fast, AI‑accelerated performance—making it the most powerful Surface laptop for everything from multitasking to demanding workloads.
- The ports you need – Charge on-the-go, transfer data fast, or create the ultimate desktop set up with two USB-C / USB4[4] ports.
- Built-in AI Companion – Work smarter, create freely, and communicate with confidence—Copilot[5] on Windows 11 is always there to help.
- In scope: browser sign-in experiences at
login.microsoftonline.com. - Outside the stated scope: Microsoft Entra External ID sign-ins using custom or CIAM domains, other sign-in domains, and MSAL/API authentication flows.
Microsoft says the policy will allow scripts from trusted Microsoft domains or CDN sources and restrict inline execution to trusted Microsoft-authorized sources.
What might stop working?
Browser extensions, monitoring or customization tools, and custom solutions that inject scripts into the sign-in page may be blocked or otherwise stop functioning as expected. Microsoft says users should still be able to sign in if an unsupported injection tool stops working, although related monitoring or sign-in workflows could be disrupted.
Rank #2
- With 16 GB of memory, runs as many programs as you want without losing the execution
- The 13.5" 2256 x 1504 screen provides a great movie watching experience
- 512 GB SSD is enough to store your essential documents and files, favorite songs, movies and pictures
- 8 Hours battery run time helps you stay unwired and work longer non-stop
Do not assume every extension—or every password manager—is affected. The relevant question is whether a tool injects scripts into, or alters the DOM of, the Entra sign-in page. Microsoft employee Megna Kokkalera wrote in a Microsoft Entra Blog discussion on December 1, 2025: “If your password manager doesn’t alter the DOM or inject script into the page, there should be no change.” She also said Microsoft’s early testing found no CSP violations for 1Password or LastPass. That is a dated vendor report about early testing, not a guarantee for every version, configuration, or sign-in flow.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchHow to check whether your organization is affected
- Map authentication paths. Identify users who sign in through a browser at
login.microsoftonline.com. Keep those flows separate from MSAL/API sign-ins and Entra External ID custom-domain sign-ins, which are outside the stated scope. - Inventory extensions and tools. Check browser extensions, monitoring and customization software, and custom solutions used during sign-in. Ask each vendor whether its product injects scripts or changes the sign-in page DOM, and whether a CSP-compatible version or alternative is available.
- Test representative scenarios. Follow Microsoft Learn’s guidance to open the browser developer console during sign-in and look for CSP violations. Test the sign-in flows, browsers, user groups, and tools your organization actually uses; an issue associated with one user’s extension may appear only in that user’s flow.
- Update and communicate. Work with vendors to update or replace affected tools with approaches that do not inject scripts. Update internal documentation and brief identity and help-desk teams on possible tool or workflow changes.
What administrators need to do
Organizations that do not use tools or extensions that inject code into the Entra sign-in experience do not need to take action, according to Microsoft. For organizations that do use them, the practical preparation is to identify dependencies, test the specific sign-in scenarios in use, and coordinate any needed changes with vendors. Microsoft does not describe a tenant setting to disable the policy.
Rank #3
- A PREMIUM PERFORMANCE LAPTOP — Ready for work, school, and creativity. Built for busy days, big projects, and nonstop multitasking. Run video calls, school and work apps, 20+ browser tabs, and AI tools at the same time without slowing down.
- WITH AI BUILT IN — With a dedicated AI chip (Qualcomm Snapdragon X2 Elite), this Copilot+ PC[5] on Windows 11 helps you work smarter and faster. Prompt, create, and automate with ease - ready for even your most demanding tasks.
- A 13.8" TOUCHSCREEN YOU'LL ACTUALLY USE — Sharp colors, real detail, smooth 120Hz scrolling on the PixelSense touchscreen[1] with LCD display[2]. Tap, scroll, or pinch to zoom - whichever feels right for streaming, editing photos, or daily work.
- 20 HOURS OF BATTERY (LEAVE THE CHARGER) — Up to 20 hours of video playback[3] on a single charge. Work from a coffee shop, take it to class/work, or binge an entire season on a long flight — it'll keep up.
- THE PORTS YOU NEED — Two USB-C / USB4[4] ports for fast charging, big file transfers, or hooking up to three 4K monitors when you want a full desktop. Wi-Fi 7 keeps you online and fast wherever you are.
For current scope and testing guidance, see Microsoft Learn’s CSP rollout guidance. The latest timing is in the MC1481309 Message Center archive; the earlier notice is MC1191924. The password-manager response appears in the Microsoft Entra Blog discussion.
Quick Recap
Best Value
- Brilliant Display – Stunning 13.8" PixelSense touchscreen[1], with brilliant LCD display[2], unleashes luminous whites, deeper blacks and colors so richly saturated bringing vivid life into every frame – perfect for work, school, streaming and creative tasks.
- Power that lasts all day – With 20 hours of battery life[3], the new Surface Laptop powers through your entire day, so you can create, work and stream from morning to night without reaching for a charger.
- Work at the speed of your ideas – Built with the latest Qualcomm Snapdragon X2 Elite (12 Core) processors, Surface Laptop delivers fast, AI‑accelerated performance—making it the most powerful Surface laptop for everything from multitasking to demanding workloads.
- The ports you need – Charge on-the-go, transfer data fast, or create the ultimate desktop set up with two USB-C / USB4[4] ports.
- Built-in AI Companion – Work smarter, create freely, and communicate with confidence—Copilot[5] on Windows 11 is always there to help.
Rank #4
- A PREMIUM PERFORMANCE LAPTOP — Ready for work, school, and creativity. Built for busy days, big projects, and nonstop multitasking. Run video calls, school and work apps, 20+ browser tabs, and AI tools at the same time without slowing down.
- WITH AI BUILT IN — With a dedicated AI chip (Qualcomm Snapdragon X2 Elite), this Copilot+ PC[5] on Windows 11 helps you work smarter and faster. Prompt, create, and automate with ease - ready for even your most demanding tasks.
- A 15" TOUCHSCREEN YOU'LL ACTUALLY USE — Sharp colors, real detail, smooth 120Hz scrolling on the PixelSense touchscreen[1] with LCD display[2]. Tap, scroll, or pinch to zoom - whichever feels right for streaming, editing photos, or daily work.
- 19 HOURS OF BATTERY (LEAVE THE CHARGER) — Up to 19 hours of video playback[3] on a single charge. Work from a coffee shop, take it to class/work, or binge an entire season on a long flight — it'll keep up.
- Two USB-C / USB4[4] ports and a microSD card reader for fast charging, big file transfers, or hooking up to three 4K monitors when you want a full desktop. Wi-Fi 7 keeps you online and fast wherever you are.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
