Extract inline JS on embedded comments (PR #6645)

I didn’t think CSP would work within an iframe… Testing proved me wrong today.

Tested locally, specifically the JavaScript that supports scrolling to a post after clicking on the post number.

GitHub

You’ve signed the CLA, xrav3nz. Thank you! This pull request is ready for review.

The unit here is seconds, while setTimeout takes milliseconds. Thus 30_000 => 30.

@eviltrout can you review, looks safe to me. the meta tag for the refresh is my only concern here

The meta tag seems fine to me. Let’s try it out.

This pull request has been mentioned on Discourse Meta. There might be relevant details there: