Belated repackaging of ckeditor.js including changes from bb2aedf.
Make wysiwygarea plugin bootstrapping CSP compliant.

Move inline script to external script file if there is no customDomain set. The CKEditor custom domain logic is IE only. That makes it safe to fall back to the non-CSP-compliant code as IE still ignores all relevant CSP directives.