Those changes were made for security, to make social engineering attacks more difficult. You can still type JS into the address bar, you just can't copy and paste it.

Further, you can copy and paste it into the console.

I can confirm that this was to close actively exploited security vulnerabilities. I was one of the first to file a "bug" on this attack vector. :)

this is probably a good thing more often then not, though.

Fascinating!