In the current version of Live Forms one needs to use regex in order to prevent HTML being submitted.

Would be great to limit this to the HTML Editor field.