Set "editor.contentFilter.allowIFrame" value false, restrict insertion <iframe> tag by User and remove <iframe> tag automatically.

{
	'editor.contentFilter.allowIFrame': false
}

Set "editor.contentFilter.allowIScript" value false, restrict insertion <script> tag by Use rand remove <script> tag automatically.

{
	'editor.contentFilter.allowScript': false
}