Using REGEXP_REPLACE in oracle 10g
I ended up using a regular expression with the REGEXP_REPLACE oracle command to do the work.
WHERE REGEXP_LIKE(myclob,'javascript:CustomHandler');
The real trick was using the POSIX character classes rather than matching on the dot wildcard. Using the dot to match any character worked only when one match was found in the clob content. In cases where I expected more than one match, it did all kinds of strange subtitutions that I didnt expect. So now I know to avoid using the dot wildcard in regex if at all possible XD
For more info on oracle 10g regex, check out http://www.oracle.com/technology/oramag/webcolumns/2003/techarticles/rischert_regexp_pt2.html, its got some great examples, lists out all the available character classes, etc.