Require URI handlers (protocol handlers) to be created in onclick event handlers

[SoniEx2]

trafficstars

I'm not sure if protocol handlers are supported yet, but if they ever are, they should only be allowed in onclick events. Prevents some abuse and other stuff. (Additionally the ability to say "never" should also exist.)