Don't allow connections from unsafe.html