Firefox 3.6.  Tried it with your example onpaste.  Get a JS error box come up with Error, cmdname not defined, then it pastes it in anyway..

 

Happens in Chrome too.  OK in IE/Safari