<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Content Security Policy (CSP) – M365.FM</title><link>https://www.m365.fm/entity/content-security-policy/</link><description>Web security standard that controls which script sources a browser may execute. In SharePoint Online, CSP enforcement blocks inline scripts and external scripts that are not registered as trusted sources.</description><language>en</language><item><title>Silent Token Renewal Explained for Modern Authentication</title><link>https://www.m365.fm/community/u/mirko-p/blog/silent-token-renewal-explained-for-modern-authentication/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/silent-token-renewal-explained-for-modern-authentication/</guid><pubDate>Tue, 28 Apr 2026 18:03:47 -0000</pubDate><category>article</category><description>When you build modern web apps—especially the single-page variety—nobody wants to log in over and over again. Silent token renewal swoops in to keep tho…</description></item><item><title>Why Report-Only Differs From Enforced in Content Security Policy</title><link>https://www.m365.fm/community/u/mirko-p/blog/why-report-only-differs-from-enforced-in-content-security-policy/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/why-report-only-differs-from-enforced-in-content-security-policy/</guid><pubDate>Thu, 23 Apr 2026 14:46:26 -0000</pubDate><category>article</category><description>If you’re serious about web security, understanding the difference between ‘report-only’ and ‘enforced’ modes in Content Security Poli…</description></item><item><title>Why Report-Only Differs From Enforced in Content Security Policy</title><link>https://www.m365.fm/community/u/mirko-p/blog/why-report-only-differs-from-enforced-in-content-security-policy-1/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/why-report-only-differs-from-enforced-in-content-security-policy-1/</guid><pubDate>Thu, 23 Apr 2026 14:46:26 -0000</pubDate><category>article</category><description>If you’re serious about web security, understanding the difference between ‘report-only’ and ‘enforced’ modes in Content Security Poli…</description></item></channel></rss>