Restrict HTML code in textarea

You don’t have to restrict HTML input since it is properly escaped and won’t be able to work as HTML. If you want to block them at any cost, implement the logic as your custom validation.