So how does the website get my browser to run a python script?

According to the article, this was supposed to work for normal users, not people hacking the server.