Microsoft has been forced to admit that the Always On VPN glitch – which it said it had fixed in an update on October 13 – ...
Content Security Policy enforcement on login.microsoftonline.com will stop browser extensions from injecting code during authentication. No workaround. No exceptions.