| Hello,
We'd like to inform you about a recent Microsoft platform change affecting SharePoint Online that may impact solutions built using the SharePoint Framework (SPFx), including Bamboo products such as Alert Plus.
Beginning March 1, 2026, Microsoft started rolling out Content Security Policy (CSP) enforcement for SharePoint Online. CSP is a security mechanism designed to restrict how scripts execute within SharePoint pages and to ensure that only trusted sources of code are allowed.
What Changed Our development team had already prepared for the previously announced CSP enforcement, which focused on preventing SPFx solutions from loading JavaScript or CSS assets from outside the SPFx package. We addressed this requirement several weeks ago to ensure our solutions complied with Microsoft’s guidance.
However, Microsoft has recently begun enforcing additional CSP restrictions that were not previously expected, specifically blocking the use of inline JavaScript event handlers (such as onclick) within SharePoint pages.
Because SharePoint Online enforces CSP at the platform level, SPFx solutions cannot relax or bypass these restrictions. As a result, some functionality within SPFx-based solutions may require adjustments to comply with the updated policy. This change may affect any SharePoint Online solution that relies on inline event handlers, including custom SPFx solutions or third-party SharePoint apps.
Impact
This change will not break Bamboo solutions, and all products will continue to load and operate normally within SharePoint Online. However, some specific functions that relied on inline event handlers may not behave as expected for users or administrators until updates are applied.
What Bamboo is Doing
Our engineering team is actively reviewing this additional enforcement across our entire product line. We currently have all hands focused on identifying and updating any affected functionality.
Where needed, we will release updated versions or hotfixes for affected Bamboo products, including Alert Plus, to ensure full compatibility with Microsoft’s updated CSP policies.
What You Need to Do
At this time, no action is required from your team.
If updates are required for any Bamboo products installed in your environment, we will provide new releases along with installation guidance for your administrators.
For customers who are not currently on active Bamboo support, please contact Sales@BambooSolutions.com so we can assist your organization with getting back on support, either through a maintenance catch-up program or one of our subscription plans.
We will continue to notify our user base as our review progresses and as updated versions become available.
Our Commitment
Microsoft platform updates occasionally introduce new security enforcement measures that require SPFx solutions to adapt. We are actively monitoring this rollout and working to ensure Bamboo products remain fully compatible with the SharePoint Online platform.
If you notice any unexpected behavior in your Bamboo solutions, please contact our support team and we will assist you promptly.
Thank you for your continued partnership with Bamboo Solutions.
Best regards, Rob Manfredi President Bamboo Solutions
|