Hi Adam,
Its funny, because when i use "PasteCleanHTML" on your example site and on my local test i dont get asked about allow by the browser...So thats fine...
But when i upload the test to my webserver and run the page, i get asked about allow anyway... strange.....
Is there a permission or something that has to be set on my Webserver??