disable js handler on https