Best way? I couldn't say, but similar questions have been asked before, and generally you should switch tactics, and use a ROText widget instead. That way you control all aspects of the text, and tags, when you click the update button. It's easier to have everything read-only, and control what changes can be made, rather than trying to "protect" something by tagging it.