Form\Control::onChange() should not accept JS code as string

[mvorisek]

passing JS code as string is dangerous

BC break should be minimal as used in Form\Control::onChange() method only