oh I think they somehow managed to respond to the request for the WebResource․axd file (the one that gives the frontend portion the JavaScripts) with a weird html page one time and give it long-lived cache headers so the web application just poisoned itself in its confusion