<script src="/embed/sahi-embed.js"
data-key="sahi_live_…"
data-fields="textarea, .rich, [id$='txtDiagnosis']"></script>
Marked data-sahi-ignore — names are never checked.
The mangled ID is deliberate — that is what an ASP.NET server control produces,
which is why the selector is written as [id$='txtNotes'].
Drug names stay unflagged because they are in the dictionary. The house-style rules catch the rest.
Same behaviour in a contenteditable. A Telerik RadEditor is this, inside an iframe — the widget finds those on its own.