UPDATE:

All major browsers now give you access to the clipboard data in a paste event. See Nico Burns's answer for an example on newer browser and also check out Tim Down's answer if you need to support older browsers.

You can listen for the onPaste event on the div to detect the paste. If you just want to disable the paste you can call event.preventDefault() from that listener.

To capture the pasted content however is a little bit more difficult since the onPaste event does not give you access to the pasted content. The usual way to handle this is to do the following from the onPaste event handler:

• create a dummy div and place it outside the window boundaries so it's not visible to visitors


• move the focus to this div


• call a sanitizer method using a setTimeout(sanitize, 0)

and from your sanitizing method:

• find the dummy div and get it's contents


• sanitize the HTML and remove the div


• move the focus back to the original div


• insert the sanitized content in the original div