onclick and onmouseover again works in preview, but is sanitized away after submission.

But the child elements added arbitrarily still remain...