Can't speak exactly to disabling/enabling JS/HTML in the learning module itself (our LMS is a few point releases behind) but would enabling HTML/JS and creating a QA folder that is only visible to a specific role QA/compliance work for your use case?
EG: Upload all of your modules to said folder and once one is checked for compliance move it out of that folder to the final resting place where it can be turned online and editing permissions removed from everyone except for the Ilias Admin. (On a per course basis.)
EG: Upload all of your modules to said folder and once one is checked for compliance move it out of that folder to the final resting place where it can be turned online and editing permissions removed from everyone except for the Ilias Admin. (On a per course basis.)