JSM Widget Not Loading on Microsoft / SharePoint Pages Due to CSP Changes?
We’ve observed an issue with the Jira Service Management (JSM) widget on Microsoft-based and SharePoint-based products.
Previously, the JSM widget was working as expected for users who embedded it into their SharePoint pages or other Microsoft-hosted applications. However, following recent changes by Microsoft—specifically around Content Security Policy (CSP) enforcement—scripts are now being blocked, which appears to be preventing the widget from loading or functioning correctly.
This seems to be related to stricter CSP rules applied by Microsoft, rather than a change on the JSM side.
Details
-
The widget worked reliably before the recent Microsoft CSP updates
-
The issue started after Microsoft tightened CSP/script execution policies
-
Script loading is now blocked, impacting the JSM widget behavior
Questions for the Community
-
Has anyone else faced similar issues with the JSM widget on SharePoint or other Microsoft-hosted platforms?
-
Are there any known workarounds, CSP configurations, or alternative approaches that have worked?
-
Is there any recommended guidance from Atlassian for this scenario?
References
-
Screenshot:
Looking forward to hearing if others in the community have encountered this and how they’ve addressed it.