Javascript in button widget is stripped

when trying to add a button to Header Widget with the “url” being javascript, the javascript is just stripped. for example if you create a Button widget and set the “url” to Javascript:alert(123); the href will actually be empty on page!