Content Security Policy enforcement on login.microsoftonline.com will stop browser extensions from injecting code during authentication. No workaround. No exceptions.
Microsoft will enforce new CSP protections for Entra ID sign-ins in October, blocking unsupported scripts and some browser extensions.