strip out onclick/onload/onchange js