[html] setting to disable script & style validation