Remove all inline-JS-calls

[dariok]

In some places, we still use javascript:-links instead of event listeners.
For the sake of uniformity and security (code injection), we should remove these and only use event listeners.