> ## Documentation Index
> Fetch the complete documentation index at: https://docs.t3planet.de/en/latest/llms.txt
> Use this file to discover all available pages before exploring further.

# Content Security Policy (CSP) Requirements

To use CKEditor premium features, you must add required CSP rules.
CSP means browser security rules for allowed connections and resources.

If these rules are missing, premium features may not work.

## Token URL

Required to validate your license token with CKEditor cloud services.
Without this rule, premium features cannot authenticate.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/csp_connect_src.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=7912e25013cceae840edd2f55c5156ad" alt="Token URL CSP Connect Src Violation" width="1588" height="783" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/csp_connect_src.webp" />

| Violation   | URI                         | Example                 |
| ----------- | --------------------------- | ----------------------- |
| connect-src | ORGANIZATION\_ID.cke-cs.com | lb8vps5lhb3m.cke-cs.com |

## Web Socket URI

Required for real-time communication.
Without this rule, WebSocket connections are blocked.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/csp_connect_src.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=7912e25013cceae840edd2f55c5156ad" alt="Web Socket URI CSP Connect Src Violation" width="1588" height="783" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/csp_connect_src.webp" />

| Violation   | URI                                | Example                        |
| ----------- | ---------------------------------- | ------------------------------ |
| connect-src | wss\://ORGANIZATION\_ID.cke-cs.com | wss\://lb8vps5lhb3m.cke-cs.com |

## CKEditor Proxy

Allows CKEditor to send specific service events through its secure proxy.
This helps premium features communicate reliably.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/proxy.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=888a33a11b8aab88895be5c73a43a290" alt="CKEditor Proxy CSP Connect Src Violation" width="1586" height="912" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/proxy.webp" />

| Violation   | URI                      | Example                  |
| ----------- | ------------------------ | ------------------------ |
| connect-src | proxy-event.ckeditor.com | proxy-event.ckeditor.com |

## Spell and Grammar Check - Font Source

Allows loading required fonts from WebSpellChecker.
Without this rule, the spelling tool may not display correctly.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/fontsrc.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=c683449f57bec22520b1663f173ed067" alt="Spell and Grammar Check Font Source CSP Violation" width="1588" height="783" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/fontsrc.webp" />

| Violation | URI                     | Example                 |
| --------- | ----------------------- | ----------------------- |
| font-src  | svc.webspellchecker.net | svc.webspellchecker.net |

## Spell and Grammar Check - Image Source

Allows loading image files used by the spell-check interface.
If blocked, some UI elements may not display.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/imagesrc.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=95acd43eeba98e9411f67d09cedb094f" alt="Spell and Grammar Check Image Source CSP Violation" width="1586" height="866" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/imagesrc.webp" />

| Violation | URI                     | Example                 |
| --------- | ----------------------- | ----------------------- |
| img-src   | svc.webspellchecker.net | svc.webspellchecker.net |

## Spell and Grammar Check - Style Source

Allows stylesheets from WebSpellChecker.
If blocked, spell and grammar UI styles may break.

<img src="https://mintcdn.com/t3planet/jEbEk8a_76aCeTxe/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/stylesrc.webp?fit=max&auto=format&n=jEbEk8a_76aCeTxe&q=85&s=267a27feb016335a5f3c5852a0238fe0" alt="Spell and Grammar Check Style Source CSP Violation" width="1586" height="922" data-path="en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/stylesrc.webp" />

| Violation      | URI                     | Example                 |
| -------------- | ----------------------- | ----------------------- |
| style-src-elem | svc.webspellchecker.net | svc.webspellchecker.net |

## Spell and Grammar Check Configuration

Get your service ID from: [https://webspellchecker.com/wsc-proofreader/](https://webspellchecker.com/wsc-proofreader/)

For Source URL, use a CDN or your custom path.
Example: [https://svc.webspellchecker.net/spellcheck31/wscbundle/wscbundle.js](https://svc.webspellchecker.net/spellcheck31/wscbundle/wscbundle.js)

<img src="https://mintlify.s3.us-west-1.amazonaws.com/t3planet/en/latest/ExtRTECKEditorPack/ContentSecurityPolicy/images/spellcheck.webp" alt="Spell and Grammar Check Style Source CSP Violation" />

## Version

For CKEditor Pack v44.0.0 and newer, use a valid license key.

## Case: Backend Not Responding

The backend may stop responding when CSP is configured incorrectly.

More details: [https://forge.typo3.org/issues/106567](https://forge.typo3.org/issues/106567)
