Loading the catalog…
Loading the catalog…
Microsoft將自10月中旬起,強制在Entra ID瀏覽器登入流程實施強化版內容安全性原則(Content Security Policy,CSP),預計10月底前完成。在這項新政策下,僅允許來自受信任Microsoft CDN網域的指令碼執行,阻擋外部或未授權程式碼注入,以降低跨站指令碼(XSS)等攻擊竊取認證資訊的風險。
What RADAR observed and classified to build this opportunity. It is what the source published, not a verification that the offer is still active.
Microsoft強化Entra ID登入驗證流程,阻擋外部指令碼注入. Microsoft將自10月中旬起,強制在Entra ID瀏覽器登入流程實施強化版內容安全性原則(Content Security Policy,CSP),預計10月底前完成。在這項新政策下,僅允許來自受信任Microsoft CDN網域的指令碼執行,阻擋外部或未授權程式碼注入,以降低跨站指令碼(XSS)等攻擊竊取認證資訊的風險。
Open sourceThe catalog shows persisted RADAR opportunities. Storage availability does not mean sources are verified or offers are active.