Hi,  
  
I'm re-opening this thread because I find the answer quite unsatisfying and we need this feature as well.  Why would it be a security hole to call a javascript function when clicking on the axis members, but it's NOT a security hole to call a javascript function when clicking on a data plot?  That doesn't make any sense. 
  
Thanks, 
Steve