Configuration

Content Security Policies

Starting with TYPO3 13, Content Security Policy (CSP) is enabled by default for the TYPO3 backend. Therefore, a specific configuration is required; otherwise, images and thumbnails will not be displayed or available for download.

Since the URLs differ for each Bynder customer, you will need to provide the following configuration with your respective URL values in your TYPO3 SitePackage.

EXT:my_extension/Configuration/ContentSecurityPolicies.php

<?php

declare(strict_types=1);

use TYPO3\CMS\Core\Security\ContentSecurityPolicy\Directive;
use TYPO3\CMS\Core\Security\ContentSecurityPolicy\Mutation;
use TYPO3\CMS\Core\Security\ContentSecurityPolicy\MutationCollection;
use TYPO3\CMS\Core\Security\ContentSecurityPolicy\MutationMode;
use TYPO3\CMS\Core\Security\ContentSecurityPolicy\Scope;
use TYPO3\CMS\Core\Security\ContentSecurityPolicy\UriValue;
use TYPO3\CMS\Core\Type\Map;

return Map::fromEntries(
    [
        Scope::backend(),

        new MutationCollection(
            new Mutation(
                MutationMode::Extend,
                Directive::ImgSrc,
                new UriValue('https://medienpool.example.com'),
                new UriValue('https://sub-domain.cloudfront.net'),
            ),
            new Mutation(
                MutationMode::Extend,
                Directive::FrameSrc,
                new UriValue('https://medienpool.example.com'),
                new UriValue('https://sub-domain.cloudfront.net'),
            ),
        ),
    ],
);