Rather than having it execute javascript that’s locally modified, maybe we could have it just load some JSON?
I know that the mirror can technically change anything, so this is not really a technical argument. I think it’s important to maintain a stance that it’s unacceptable to change anything (other than this…). Changing a bit of meta data (a JSON file) seems less slippery slope than changing a bit of website code. Ask
