The author also could create a new post stating that some changes have been made if it's worth an update in his opinion. I don't think any other concept is needed since editing posts is more wiki-like than forum-like. If your forum relies on something like this you might consider using a wiki platform instead or additionally.
The same origin policy would protect against most of that stuff, but I agree. Maybe having a url filter of some sort testing it against a whitelisted database which could be configure by the admins.
I work in an environment where there are two nodeBB instances : integration and production.
Integration is where I've tested all features, graphic design, etc.
My commmunity is now ready to go into production. I would like to dump all the configuration I've fine tuned in the config platform without the content, i.e. users and posts (which are all dummy, made for testing purpose).
I've searched the nodeBB forum, and I've only found ways to dump the entire database (config AND content).
This will also help me in the future: I would like to keep my integration platform to test new configurations and push them to the production once tested.
Thanks for your help