@lupyuen

The issue here is not that Javascript can respond to events -- that's a useful feature. The problem is that JavaScript has access to the clipboard. When did they add that feature? Who's numb-skull idea was that? Can they read the clipboard as well? That'd be a huge security issue as well.

I can see no legitimate purpose to allowing JavaScript on a web page to have access to the clipboard.