disallow full html pages

See http://validator.w3.org/feed/docs/warning/SecurityRisk.html
release 1.4.1