SharePoint Online: Content Security Policy Control in Tenant Administration
SharePoint Online Tenant Administrators can now control script sources for modern pages, allowing custom code from external sources like CDNs. This feature will roll out from late March to mid-May 2025, providing a “Trusted script sources” page for managing and enforcing trusted script sources. No admin action is required. SharePoint Online Tenant Administrators can now allow script sources for modern pages in SharePoint sites. This feature is particularly useful in scenarios where modern pages have custom code that loads scripts (e.g., TypeScript code) from external sources like a content delivery network (CDN). SharePoint will now report to administrators where sources that have not been allowed are loaded from, providing a way for administrators to identify those sources and take action. Tenant Administrators can also enforce browsers to only load scripts from allowed sources. This behavior can be enabled using SharePoint Online Management Shell. When this will happen: Targeted Release: We will begin rolling out on late March 2025 and expect to complete by early April 2025. General Availability (Worldwide): We will begin rolling out on late April 2025 and expect to complete by late April 2025. General Availability (GCC, GCC High, DoD): We will begin rolling out on late April 2025 and expect to complete by mid-May 2025. How this will affect your organization: Tenant Administrators will have the option to control and govern where custom code loads scripts and, if needed, enforce browsers to only load scripts from trusted sources. A new “Trusted script sources” page will give administrators control over which source can be trusted to load scripts. View image in new tab View image in new tab View image in new tab What you need to do to prepare: This rollout will happen automatically with no admin action required. View image in new tab View image in new tab Message ID: MC1055557
The post SharePoint Online: Content Security Policy Control in Tenant Administration appeared first on M365 Admin.
Published on:
Learn moreWe can help you with SharePoint Online: Content Security Policy Control in Tenant Administration
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Teams: Enhanced real-time alerting rule management in the Teams admin center
Microsoft Teams will enhance Real-Time Alerting rule management in the Teams admin center by enabling rule duplication, bulk user uploads, and...
Copilot Studio – Use MCP-compliant tools in agent workflows
We are announcing the ability to use MCP (model context protocol) – compliant tools in agent workflows in Microsoft Copilot Studio. This...
Microsoft Teams: Personal message reminders for chat and channels
Microsoft Teams will introduce personal message reminders for chat and channel messages in October 2026. Users can set, manage, and receive no...
M365 Copilot: Tell Copilot what you need directly from the Copilot button in Word, Excel, and PowerPoint
Microsoft 365 Copilot adds a new prompt input directly on the Copilot button in Word, Excel, and PowerPoint for faster, contextual content cre...
Microsoft Outlook for iPad: Minimize email drafts and return to them later
Outlook for iPad will allow users to compose emails in a separate window and minimize drafts to return later, enhancing multitasking. This fea...
Microsoft Purview eDiscovery: Select user-owned SharePoint Embedded containers as a data source
Microsoft Purview eDiscovery will support selecting user-owned SharePoint Embedded containers as data sources for cases, searches, and holds s...
Microsoft Purview: Removing pay-as-you-go requirements for Edge for Business DLP unmanaged app protections
Starting mid-October 2026, Microsoft Purview will remove the pay-as-you-go billing requirement for inline collection and DLP policies protecti...
Data Privacy: Microsoft Online Services Subprocessor Disclosure
This notice provides an update to the Microsoft Online Services Subprocessors List. Microsoft may engage non-Microsoft organizations to help p...
Microsoft Graph: User.ReadBasic.All will no longer allow reading user app role assignments and license details
User.ReadBasic.All will no longer provide access to user app role assignments and license details starting mid-September 2026 to fix a securit...
30-Day Reminder: Windows Server 2022 will reach end of mainstream support on October 13, 2026
On October 13, 2026, Windows Server 2022 will reach end of mainstream support. The October 2026 security update will be the last mainstream su...