The key distinguishing characteristic of HTML is that it is not a full-fledged programming language. Its primary application is to describe the layout and appearance of a page, which would make it more akin to PostScript than to Perl or C. Pure HTML documents do not contain conditional logic, for example, and they cannot respond to user input. They simply tell a client program how to display a mixture of text and graphics.
Even given HTML’s simplicities, it is possible to use it for a number of unethical activities. The EMBED command allows one to hide malicious code or executables. In addition, many HTML pages are simply designed to present links, or to automatically redirect themselves, to malware applications