I don’t want users to be able to input HTML in the text input box. By default I am assuming that they are unable to do so. Am I correct on this?
Nothing prevents users from using HTML tags like <strong>tag</strong>, but it wont actually do anything if you are just displaying the data in a textbox. It will show up as <strong>tag</strong>, not tag. However BB code is enabled by default, so if they type [b]tag[/b] it will show up as tag. though this can be easily toggled in the element. https://prnt.sc/w2w86q