Blog Post

Microsoft SharePoint Blog
3 MIN READ

SharePoint Online Content Security Policy (CSP): Enforcement Dates and Guidance

VesaJuvonen's avatar
VesaJuvonen
Icon for Microsoft rankMicrosoft
Nov 25, 2025
Content Security Policy (CSP) is a critical browser security feature designed to protect web applications from threats like cross-site scripting (XSS), clickjacking, and other code injection attacks....
Updated Nov 24, 2025
Version 1.0
admin
developer
intelligent intranet
microsoft 365
sharepoint
support
ChristophSadleder's avatar
ChristophSadleder
Occasional Reader
Nov 27, 2025

Thank you for the information. This is certainly a positive step toward improving security. Can we assume that, as shown in the screenshot and article (https://learn.microsoft.com/en-us/sharepoint/dev/spfx/content-securty-policy-trusted-script-sources), the policy “script-src ‘unsafe-eval’ ...” will remain in place and will not be excluded from the policy?