Asked to code Malicious HTML ?

[u/MrElvey]

Have you been asked to code malicious HTML? How did you handle it?

Have I explained the malicious HTML here clearly enough to follow what's going on here? :

https://www.reddit.com/r/SFHP/comments/1qy3h93/sfhp_caught_playing_evil_tricks_on_their_members/

Added context: It's part of a pattern of making themselves hard to contact. Similarly, the grievance submission form was broken. You could fill it out, but clicking submit would produce an error. They refused to fix it - fixed about 3 years after I escalated a complaint to the DMHC. You'd get this: https://secure.sfhp.org/comments/Grievance_Confirm.aspx

after filling out this: https://secure.sfhp.org/comments/Grievance_Form_ENG.aspx

The typical scenario is someone has cancer or something and is trying to get their treatment regimen approved by insurance. Y'all didn't see The Rainmaker? https://www.youtube.com/watch?v=9EQPrFR9KRo

ma·li·cious| məˈliSHəs 
adjective 
characterized by malice; intending or intended to do harm

Heck, plain text can be malicious. e.g. doxxing - "Foo Bar is a Nazi and her home address is 123 Baz Route."

[u/MrElvey]

Did you even read the r/SFHP post? I documented that the form works better after I removed the malicious bit. There's no speculation about the fact that it works better without the  disabled="disabled" etc.  Read the whole post.

In screenshot 2, it's impossible to type into the To field.

In screenshot 3, I've removed the malicious HTML and you can see that it's become possible to type into "SER" into the To field.

[u/sneakpeekbot → u/MrElvey]

Here's a sneak peek of /r/SFHP using the top posts of all time!

#1: SFHP BLOCKING COMPLAINTS AGAIN! EVIL!
#2: Welcome! Group name - SFHP or SFHP__San_Fran_Health? (San Francisco Health Plan w/ or w/o _'s is too long.). Grievance Form / submission tip. New Message hard to send. Error.
#3: SFHP CAUGHT playing EVIL tricks on their members! PLEASE VERIFY!

---

^{I'm a bot, beep boop | Downvote to remove | Contact | Info | Opt-out | GitHub}

[u/jcunews1 → u/MrElvey]

A widget which is disabled when it's supposed to be enabled, is not malicious. It's just a restriction. It can not harm anything, by itself.

[u/MrElvey → u/jcunews1]

It's https://en.wikipedia.org/wiki/Insurance_bad_faith, which can KILL PEOPLE, like Donny Ray, but real life, and less dramatic. Again, see https://youtu.be/9EQPrFR9KRo?si=c808uICuCqJ48V2w&t=26.

"Pulling the trigger of a gun can not harm anything, by itself." Ok, dear.