How to dismiss code block in comments?

Hi @lipand,
There is no any way to inject your site using the code feature in the editor. The code you’re inserting is being decoded, you see the clean code but it’s already decoded and has no any executing ability.

In any case if you want to disable any button on the toolbar you should use the corresponding option in Dashboard > wpDiscuz > Settings > Comment Form admin page. The doc: https://wpdiscuz.com/docs/wpdiscuz-7/plugin-settings/comment-form/#rich-editor-toolbar-buttons