Just disallow scripts on HTML eSapce pages