Prevent invoking script from browser

#5526