Microsoft Edge: Retirement of default unload event support

🚨 The Signal: Microsoft Edge will retire default support for 'unload' event handlers in web pages by late 2026. This improves browser performance and reliability, but may break legacy web applications that depend on this unreliable event for critical functions.

The Impact

Organizations with custom or third-party web applications using 'unload' events face potential data integrity and availability risks.

  • Application Owners: Risk of data loss or incomplete operations if 'unload' event handlers are not migrated.
  • Users: May experience broken functionality or data loss in affected web applications.
  • Security Teams: Indirect risk to data integrity and availability if critical applications fail to function correctly.

The Action

  1. Identify internal and third-party web applications that may use 'unload' event handlers.
  2. Engage application owners and developers to assess reliance on 'unload' events.
  3. Plan and execute migration of 'unload' event handlers to modern lifecycle APIs (e.g., 'pagehide', 'visibilitychange').
  4. Implement Permissions Policy to explicitly allow 'unload' handlers for critical, non-migratable applications as a temporary measure.
  5. Test updated applications thoroughly in Microsoft Edge to ensure continued functionality.

Domain: M365-Apps · Impact: medium · Workload: M365 Apps · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860