Hacking Github with Webkit
> Custom JS on your subdomains is a bad idea<p>What is the difference between allowing users to put custom JS on a subdomain, vs. someone just opening up the developer console and running whatever JS they like? Does JS loaded from the server have different privileges to JS entered at the console?