Primary miniBB scripts for CSP

That's an interesting question. I've been wondering if it would be possible as it would be totally unique for a forum to be able to do it ;) I think an IP and maybe $user_usr could be checked to allow a few minutes edit, even though it would not be 100% sure in case another guest user from the same IP but different location visits the page (still, it's almost impossible).

You can edit the post only being logged as a member — and you can edit the post only made from this member's account.

Here on miniBB forum, you are allowed to edit your message within 5 minutes since it's posted.

Hello Paul,

Smart.

Hello Paul,

header("Content-Security-Policy: script-src 'self'; script-src-elem 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self'; etc, etc, etc");

By including this directive at the beginning of every primary PHP script on my main site, I achieve an A+ rating from the MDN tool.

For MiniBB, it is necessary to add 'unsafe-inline' to `script-src`; otherwise, JavaScript code essential for the forum's operation gets blocked.
With this change, MiniBB receives a B+ rating, which is good.

Just have to put this directive at the beginning of index.php and the main admin script.

For me this discussion is achieved.

Thank you.