script protect off and allowing for default values on custom HTML