Forum Discussion

Adèle's avatar
Adèle
Copper Contributor
Jul 08, 2026

Edge >=150 blocks ALL extensions on *.cloud.microsoft (regression from 149) - no policy override

Starting with Edge 150, a hardcoded extension blocklist applies to *.cloud.microsoft (M365 Copilot and Microsoft 365 app surfaces). Extensions no longer run on these pages. This is a regression - on ...
0xadada's avatar
0xadada
Copper Contributor
Jul 21, 2026

From CrowdStrike Falcon Extension, we've found the following:

The Microsoft Edge browser has a security restriction (some introduced in version 143.0+, more in 150+) that prevents browser extensions from running on certain Microsoft website(s). Since Falcon functionality includes extension-based functionality, they will not apply to pages that the browser vendor (Microsoft) has prevented extensions from running in.

The restrictions apply to the following websites:

  • m365.cloud.microsoft
  • edgeservices.bing.com
  • copilot.microsoft.com
  • explore.microsoft.com
  • www.microsoft365.com

Related to https://github.com/microsoft/MicrosoftEdge-Extensions/issues/644 Bug - Edge Addons] All extensions are blocked on *.cloud.microsoft starting in Edge ≥150 with no override

No enterprise policy override: Unlike runtime_blocked_hosts in the ExtensionSettings policy (which admins can configure), these hardcoded restrictions cannot be overridden not even by runtime_allowed_hosts or force-installed extensions.

No official Edge release notes entry documents the specific domain list impacted by this