My quick glace at it agrees with you, it looks like it replaces the URLs of the images, presumably to load compressed versions.