readme no-server-side-scripting message