I have been getting some errors from spiders that are trying to try different URLs to find a weakness.
The URL is this: /AdminUsers/javascript:void(0);
I think this would just take some sort of change in the Renderer.cfc in the functions locateModuleLayout and locateModuleView.
Something like:
if ( !structKeyExists(variables.modulesConfig,arguments.module) )
return 'whatever the invalidEventHandler event path is'