deny remote access to elements/*html, RT#23357