Security Review for Microsoft Edge version 147
We have reviewed the new settings in Microsoft Edge version 147 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baseline continues to be our recommended configuration which can be downloaded from the Microsoft Security Compliance Toolkit. Microsoft Edge version 147 introduced 9 new Computer and User settings; we have included a spreadsheet listing the new settings to make it easier for you to find. Version 147 introduced the Control the availability of the XSLT feature policy (XSLTEnabled). This policy exists to support enterprise testing and transition scenarios while the Chromium project works toward deprecating and removing XSLT support from the browser due to security concerns associated with this legacy feature. XSLT support in modern browsers represents a disproportionate attack surface, and upstream Chromium has announced plans to disable and ultimately remove XSLT in a future release. As a result, organizations should treat continued reliance on client‑side XSLT as technical debt and plan migration accordingly. Additional details can be found here. Organizations are encouraged to proactively test setting XSLTEnabled = Disabled to identify application dependencies and remediation requirements ahead of any future default changes or removal of the feature. As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here. Please continue to give us feedback through the Security Baselines Discussion site or this post.
Edge PDF reader comment issue
Hi all, I tumbled upon an issue with Edge PDF reader, while adding comments in a PDF document. Issue While adding comments in my document, everything was working fine until it wasn't (added around ten comments before it stopped working). Basically I'm able to open the comment popup and type my comment, but unable to validate it. I did some digging online and found this tread (sadly closed) where user encountered the same issue. https://answers.microsoft.com/en-us/microsoftedge/forum/all/adding-comments-to-pdf-edge-document/92b96c52-a1e3-4433-a58e-29c76691fa7c I tried to work around the issue by restarting my browser, which did not help. However, it seemed to me that it's a mouse focus issue. How to reproduce it I got the issue while using two Edge windows side by side on the same monitor (each taking half the screen), while having a second monitor (that I use for other stuff) aside. The problem seems to solve itself somehow after some time when closing one of the two Edge window and putting the other in full screen. When I try to add a comment, I first highlight the text, then clic on the comment button on the popup menu and type my comment. However, when I want to validate the comment, the wrong cursor is displayed when I hover the "validate" button (the text insert cursor instead of the hand). I have to clic once (the text in the PDF doc previously highlighted is no more) which change the cursor to an arrow, then another clic which closes the comment menu, whitout adding the comment. Workaround I managed to add a comment in this situation by typing the comment, then using the tab key to select the "validate key" and press the enter key, and it worked. On a side note, I find it quite complicated to submit feedback, I think I spent a good half an hour before reaching this forum (I don't even know if it's the right place). Anyhow, I hope it can helpSecurity Review for Microsoft Edge version 146
We have reviewed the new settings in Microsoft Edge version 146 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baseline continues to be our recommended configuration which can be downloaded from the Microsoft Security Compliance Toolkit. Microsoft Edge version 146 introduced 9 new Computer and User settings; we have included a spreadsheet listing the new settings to make it easier for you to find. As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here. Please continue to give us feedback through the Security Baselines Discussion site or this post.Security Review for Microsoft Edge version 145
We have reviewed the new settings in Microsoft Edge version 145 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baseline continues to be our recommended configuration which can be downloaded from the Microsoft Security Compliance Toolkit. Microsoft Edge version 145 introduced 11 new Computer and User settings; we have included a spreadsheet listing the new settings to make it easier for you to find. As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here. Please continue to give us feedback through the Security Baselines Discussion site or this post.Security baseline for Microsoft Edge version 139
We have reviewed the settings in Microsoft Edge version 139 and updated our guidance with the addition of one setting and the removal of one setting. A new Microsoft Edge security baseline package was just released to the Download Center. You can download the new package from the Security Compliance Toolkit. Allow software WebGL fallback using SwiftShader (Added) The EnableUnsafeSwiftShaderpolicy controls whether SwiftShader is used as a fallback for WebGL when hardware GPU acceleration is disabled or unavailable. SwiftShader, a software-based renderer, was used to enable WebGL support in environments lacking GPU acceleration, such as virtual machines. However, its continued use poses potential risks, whereby malicious web content could exploit vulnerabilities in the renderer. Due to the potential risks, we have decided to enforce the default and disable this setting. Edge for Business Connectors (Worth Mentioning) The new Edge for Business security connectors feature introduces a powerful framework that integrates the browser directly with your organization’s existing security stack covering authentication, data loss prevention (DLP), and reporting. By enabling real-time device trust validation, seamless DLP enforcement, and unified browser-based telemetry, these connectors help close critical gaps in enterprise security while extending the value of your current investments. Additional information can be found on the landing page. The following settings have been removed due to deprecation: Microsoft Edge/Private Network Request Settings/Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. Microsoft Edge version 139 introduces 6 new computer settings and 6 new user settings. We have included a spreadsheet listing the new settings in the release to make it easier for you to find them. As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here. Please continue to give us feedback through the Security Baseline Community or in comments on this post.
Persistent issues with Read Aloud in Edge
I have Windows 11. Today I began having an issue wherein the Read Aloud feature built into Edge doesn't work. I was initially trying to use a similar function on Internet Archive, and noticed that while all the Microsoft voices seemed to be available in the onsite dropdown, the only voices that made any sound were David, Mark, and Zira---none of the "Online (Natural)" voices. I tried to use Read Aloud as a workaround, and found all the buttons greyed out completely. Mind you, everything worked fine yesterday, and I made no changes to my computer in the intervening time. I've opened up two support tickets, but neither live chat agent was able to resolve the issue. Here are the things I've tried with their help: trying the feature on different websites updating & restarting Edge resetting Edge settings to defaults updating & restarting computer switching wifi networks connecting to a hotspot using InPrivate mode using a new Edge profile (rule out interference from extensions) checking that English tts is downloaded in Time & language > Language & region turning Online speech recognition off and back on again resetting experimental features checking sound systems (they work, but just in case) doing a system reset (?) to 24 hours ago, which took about an hour and undid all the updates I just mentioned maybe something else I don't remember? The next thing I am going to try is give my computer a long nap. It's been a while, so maybe it just needs some shut eye. Otherwise, help????Security Review for Microsoft Edge version 144
We have reviewed the new settings in Microsoft Edge version 144 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baseline continues to be our recommended configuration which can be downloaded from the Microsoft Security Compliance Toolkit. Microsoft Edge version 144 introduced 2 new Computer and User settings; we have included a spreadsheet listing the new settings to make it easier for you to find. As a friendly reminder, all available settings for Microsoft Edge are documented here, and all available settings for Microsoft Edge Update are documented here. Please continue to give us feedback through the Security Baselines Discussion site or this post.
