Use disallowed content attribute to reject malicous code