Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.
/*
* Shared stuff that all Enano themes (should) use. IE-only.
*/
span.tc_small_index_1 {
filter: alpha(opacity=100);
}
span.tc_small_index_2 {
filter: alpha(opacity=80);
}
span.tc_small_index_3 {
filter: alpha(opacity=60);
}
span.tc_small_index_4 {
filter: alpha(opacity=50);
}
span.tc_small_index_5 {
filter: alpha(opacity=45);
}
span.tc_small_index_6 {
filter: alpha(opacity=40);
}
span.tc_small_index_7 {
filter: alpha(opacity=35);
}
span.tc_small_index_8 {
filter: alpha(opacity=30);
}