JSFiddle - React, Tailwind, and code Playground

HTML

<preventjs>
    <div id="user-content-area">
        <!-- evil user content -->
        <p onclick="alert('evil stuff');">I'm not evil, promise.</p>
        <p onmouseover="alert('evil stuff');">Neither am I.</p> 
        <!-- end user content -->
    </div>
</preventjs>

JavaScript

$("preventjs *").each(function() {
    var attribs = this.attributes;
    var that = this;
    $.each(attribs, function(i, attrib) {
        if(attrib.name.indexOf("on") === 0) {
            $(that).removeAttr(attrib.name);
        }
    });

});