diff --git a/modules/ROOT/pages/tinymce-and-csp.adoc b/modules/ROOT/pages/tinymce-and-csp.adoc
index a0426db8fb..c3de12cd78 100644
--- a/modules/ROOT/pages/tinymce-and-csp.adoc
+++ b/modules/ROOT/pages/tinymce-and-csp.adoc
@@ -24,9 +24,10 @@ This single entry covers all cloud-hosted services, including but not limited to
 * xref:importword.adoc[Import from Word] (`+importdocx.api.tiny.cloud+`)
 * xref:exportword.adoc[Export to Word] (`+exportdocx.api.tiny.cloud+`)
 * xref:exportpdf.adoc[Export to PDF] (`+exportpdf.api.tiny.cloud+`)
-* Image proxy (`+imageproxy.tiny.cloud+`)
-* Link checking (`+hyperlinking.tiny.cloud+`)
-* Spell checking (`+spelling.tiny.cloud+`)
+* Image proxy for xref:editimage.adoc[Image Editing] (`+imageproxy.api.tiny.cloud+`)
+* Hyperlinking service for xref:linkchecker.adoc[Link Checker] and xref:introduction-to-mediaembed.adoc[Enhanced Media Embed] (`+hyperlinking.api.tiny.cloud+`)
+* Spell checking (`+spelling.api.tiny.cloud+`)
+* xref:tinydrive-introduction.adoc[{cloudfilemanager}] (`+tinydrive.api.tiny.cloud+`)
 
 NOTE: Self-hosted deployments that do not connect to any {cloudname} services do not require this allowlisting. For self-hosted services such as on-premises document converters or AI, allowlist the domain where the self-hosted service is running instead.