@animeirl @graf It's FE-independent as far as I can tell. Gleason seems to think there's PleromaFE involvement, I don't know what the deal is there (he was Iron Dome'd during the spamwave last week, so he can't tag me; solved the spam issue from FSE's end) but I don't see how it's possible. You have to allow an HTML attachment to load the script: unless a FE loads the HTML to do a preview, FE isn't involved.