From 739ce8c1ca7dbc739036576a981a2d77b4e8db9f Mon Sep 17 00:00:00 2001
From: Ilguiz Latypov <ilguiz_latypov@manulife.com>
Date: Wed, 17 May 2017 15:30:45 -0400
Subject: [PATCH] White-list expression parameters in an attempt to avoid XSS
 issue #2.

---
 FlatCalXP/demos/Classic/iflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/demos/Classic/nflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/demos/Fin445/iflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/demos/Fin445/nflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/demos/Fullsized/iflateng.htm           | 16 +++++++++++++++-
 FlatCalXP/demos/Fullsized/nflateng.htm           | 16 +++++++++++++++-
 FlatCalXP/demos/HelloWorld/iflateng.htm          | 16 +++++++++++++++-
 FlatCalXP/demos/HelloWorld/nflateng.htm          | 16 +++++++++++++++-
 FlatCalXP/demos/MockupSibling/iflateng.htm       | 16 +++++++++++++++-
 FlatCalXP/demos/MockupSibling/nflateng.htm       | 16 +++++++++++++++-
 FlatCalXP/demos/MultiPicker/iflateng.htm         | 16 +++++++++++++++-
 FlatCalXP/demos/MultiPicker/nflateng.htm         | 16 +++++++++++++++-
 FlatCalXP/demos/Popup/iflateng.htm               | 16 +++++++++++++++-
 FlatCalXP/demos/Popup/nflateng.htm               | 16 +++++++++++++++-
 FlatCalXP/demos/RangePicker/iflateng.htm         | 16 +++++++++++++++-
 FlatCalXP/demos/RangePicker/nflateng.htm         | 16 +++++++++++++++-
 FlatCalXP/demos/RestrictedRange/iflateng.htm     | 16 +++++++++++++++-
 FlatCalXP/demos/RestrictedRange/nflateng.htm     | 16 +++++++++++++++-
 FlatCalXP/demos/SchedulePicker/iflateng.htm      | 16 +++++++++++++++-
 FlatCalXP/demos/SchedulePicker/nflateng.htm      | 16 +++++++++++++++-
 FlatCalXP/demos/Tileup/iflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/demos/Tileup/nflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/engines/iflateng.htm                   | 16 +++++++++++++++-
 FlatCalXP/engines/nflateng.htm                   | 16 +++++++++++++++-
 FlatCalXP/themes/Contrast/iflateng.htm           | 16 +++++++++++++++-
 FlatCalXP/themes/Contrast/nflateng.htm           | 16 +++++++++++++++-
 FlatCalXP/themes/Decent/iflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Decent/nflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Fancy/iflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/themes/Fancy/nflateng.htm              | 16 +++++++++++++++-
 FlatCalXP/themes/Mac/iflateng.htm                | 16 +++++++++++++++-
 FlatCalXP/themes/Mac/nflateng.htm                | 16 +++++++++++++++-
 FlatCalXP/themes/Mini/iflateng.htm               | 16 +++++++++++++++-
 FlatCalXP/themes/Mini/nflateng.htm               | 16 +++++++++++++++-
 FlatCalXP/themes/Mockup/iflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Mockup/nflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Normal/iflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Normal/nflateng.htm             | 16 +++++++++++++++-
 FlatCalXP/themes/Outlook/iflateng.htm            | 16 +++++++++++++++-
 FlatCalXP/themes/Outlook/nflateng.htm            | 16 +++++++++++++++-
 FlatCalXP/themes/OutlookTwin/iflateng.htm        | 16 +++++++++++++++-
 FlatCalXP/themes/OutlookTwin/nflateng.htm        | 16 +++++++++++++++-
 FlatCalXP/themes/Supermini/iflateng.htm          | 16 +++++++++++++++-
 FlatCalXP/themes/Supermini/nflateng.htm          | 16 +++++++++++++++-
 FlatCalXP/themes/Triplex/iflateng.htm            | 16 +++++++++++++++-
 FlatCalXP/themes/Triplex/nflateng.htm            | 16 +++++++++++++++-
 FlatCalXP/themes/xp/iflateng.htm                 | 16 +++++++++++++++-
 FlatCalXP/themes/xp/nflateng.htm                 | 16 +++++++++++++++-
 PopCalXP/demos/Classic/ipopeng.htm               | 16 +++++++++++++++-
 PopCalXP/demos/Classic/npopeng.htm               | 16 +++++++++++++++-
 PopCalXP/demos/CrossFrame/ipopeng.htm            | 16 +++++++++++++++-
 PopCalXP/demos/CrossFrame/npopeng.htm            | 16 +++++++++++++++-
 PopCalXP/demos/DateRange/ipopeng.htm             | 16 +++++++++++++++-
 PopCalXP/demos/DateRange/npopeng.htm             | 16 +++++++++++++++-
 PopCalXP/demos/HelloWorld/ipopeng.htm            | 16 +++++++++++++++-
 PopCalXP/demos/HelloWorld/npopeng.htm            | 16 +++++++++++++++-
 PopCalXP/demos/Netscape4/ipopeng.htm             | 16 +++++++++++++++-
 PopCalXP/demos/Netscape4/npopeng.htm             | 16 +++++++++++++++-
 PopCalXP/demos/RangePicker/ipopeng.htm           | 16 +++++++++++++++-
 PopCalXP/demos/RangePicker/npopeng.htm           | 16 +++++++++++++++-
 PopCalXP/demos/WeekPicker/ipopeng.htm            | 16 +++++++++++++++-
 PopCalXP/demos/WeekPicker/npopeng.htm            | 16 +++++++++++++++-
 PopCalXP/engines/ipopeng.htm                     | 16 +++++++++++++++-
 PopCalXP/engines/npopeng.htm                     | 16 +++++++++++++++-
 PopCalXP/themes/Contrast/ipopeng.htm             | 16 +++++++++++++++-
 PopCalXP/themes/Contrast/npopeng.htm             | 16 +++++++++++++++-
 PopCalXP/themes/DateTime/ipopeng.htm             | 16 +++++++++++++++-
 PopCalXP/themes/DateTime/npopeng.htm             | 16 +++++++++++++++-
 PopCalXP/themes/Double/ipopeng.htm               | 16 +++++++++++++++-
 PopCalXP/themes/Double/npopeng.htm               | 16 +++++++++++++++-
 PopCalXP/themes/Fancy/ipopeng.htm                | 16 +++++++++++++++-
 PopCalXP/themes/Fancy/npopeng.htm                | 16 +++++++++++++++-
 PopCalXP/themes/Mac/ipopeng.htm                  | 16 +++++++++++++++-
 PopCalXP/themes/Mac/npopeng.htm                  | 16 +++++++++++++++-
 PopCalXP/themes/Mini/ipopeng.htm                 | 16 +++++++++++++++-
 PopCalXP/themes/Mini/npopeng.htm                 | 16 +++++++++++++++-
 PopCalXP/themes/Normal/ipopeng.htm               | 16 +++++++++++++++-
 PopCalXP/themes/Normal/npopeng.htm               | 16 +++++++++++++++-
 PopCalXP/themes/Outlook/ipopeng.htm              | 16 +++++++++++++++-
 PopCalXP/themes/Outlook/npopeng.htm              | 16 +++++++++++++++-
 .../themes/OutlookTriplexVertical/ipopeng.htm    | 16 +++++++++++++++-
 .../themes/OutlookTriplexVertical/npopeng.htm    | 16 +++++++++++++++-
 PopCalXP/themes/OutlookTwin/ipopeng.htm          | 16 +++++++++++++++-
 PopCalXP/themes/OutlookTwin/npopeng.htm          | 16 +++++++++++++++-
 PopCalXP/themes/Supermini/ipopeng.htm            | 16 +++++++++++++++-
 PopCalXP/themes/Supermini/npopeng.htm            | 16 +++++++++++++++-
 PopCalXP/themes/xp/ipopeng.htm                   | 16 +++++++++++++++-
 PopCalXP/themes/xp/npopeng.htm                   | 16 +++++++++++++++-
 duplicate.sh                                     | 12 ++++++++++++
 89 files changed, 1332 insertions(+), 88 deletions(-)
 create mode 100755 duplicate.sh

diff --git a/FlatCalXP/demos/Classic/iflateng.htm b/FlatCalXP/demos/Classic/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/Classic/iflateng.htm
+++ b/FlatCalXP/demos/Classic/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Classic/nflateng.htm b/FlatCalXP/demos/Classic/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/Classic/nflateng.htm
+++ b/FlatCalXP/demos/Classic/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Fin445/iflateng.htm b/FlatCalXP/demos/Fin445/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/Fin445/iflateng.htm
+++ b/FlatCalXP/demos/Fin445/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Fin445/nflateng.htm b/FlatCalXP/demos/Fin445/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/Fin445/nflateng.htm
+++ b/FlatCalXP/demos/Fin445/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Fullsized/iflateng.htm b/FlatCalXP/demos/Fullsized/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/Fullsized/iflateng.htm
+++ b/FlatCalXP/demos/Fullsized/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Fullsized/nflateng.htm b/FlatCalXP/demos/Fullsized/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/Fullsized/nflateng.htm
+++ b/FlatCalXP/demos/Fullsized/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/HelloWorld/iflateng.htm b/FlatCalXP/demos/HelloWorld/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/HelloWorld/iflateng.htm
+++ b/FlatCalXP/demos/HelloWorld/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/HelloWorld/nflateng.htm b/FlatCalXP/demos/HelloWorld/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/HelloWorld/nflateng.htm
+++ b/FlatCalXP/demos/HelloWorld/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/MockupSibling/iflateng.htm b/FlatCalXP/demos/MockupSibling/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/MockupSibling/iflateng.htm
+++ b/FlatCalXP/demos/MockupSibling/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/MockupSibling/nflateng.htm b/FlatCalXP/demos/MockupSibling/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/MockupSibling/nflateng.htm
+++ b/FlatCalXP/demos/MockupSibling/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/MultiPicker/iflateng.htm b/FlatCalXP/demos/MultiPicker/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/MultiPicker/iflateng.htm
+++ b/FlatCalXP/demos/MultiPicker/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/MultiPicker/nflateng.htm b/FlatCalXP/demos/MultiPicker/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/MultiPicker/nflateng.htm
+++ b/FlatCalXP/demos/MultiPicker/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Popup/iflateng.htm b/FlatCalXP/demos/Popup/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/Popup/iflateng.htm
+++ b/FlatCalXP/demos/Popup/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Popup/nflateng.htm b/FlatCalXP/demos/Popup/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/Popup/nflateng.htm
+++ b/FlatCalXP/demos/Popup/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/RangePicker/iflateng.htm b/FlatCalXP/demos/RangePicker/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/RangePicker/iflateng.htm
+++ b/FlatCalXP/demos/RangePicker/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/RangePicker/nflateng.htm b/FlatCalXP/demos/RangePicker/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/RangePicker/nflateng.htm
+++ b/FlatCalXP/demos/RangePicker/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/RestrictedRange/iflateng.htm b/FlatCalXP/demos/RestrictedRange/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/RestrictedRange/iflateng.htm
+++ b/FlatCalXP/demos/RestrictedRange/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/RestrictedRange/nflateng.htm b/FlatCalXP/demos/RestrictedRange/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/RestrictedRange/nflateng.htm
+++ b/FlatCalXP/demos/RestrictedRange/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/SchedulePicker/iflateng.htm b/FlatCalXP/demos/SchedulePicker/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/SchedulePicker/iflateng.htm
+++ b/FlatCalXP/demos/SchedulePicker/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/SchedulePicker/nflateng.htm b/FlatCalXP/demos/SchedulePicker/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/SchedulePicker/nflateng.htm
+++ b/FlatCalXP/demos/SchedulePicker/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Tileup/iflateng.htm b/FlatCalXP/demos/Tileup/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/demos/Tileup/iflateng.htm
+++ b/FlatCalXP/demos/Tileup/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/demos/Tileup/nflateng.htm b/FlatCalXP/demos/Tileup/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/demos/Tileup/nflateng.htm
+++ b/FlatCalXP/demos/Tileup/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/engines/iflateng.htm b/FlatCalXP/engines/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/engines/iflateng.htm
+++ b/FlatCalXP/engines/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/engines/nflateng.htm b/FlatCalXP/engines/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/engines/nflateng.htm
+++ b/FlatCalXP/engines/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Contrast/iflateng.htm b/FlatCalXP/themes/Contrast/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Contrast/iflateng.htm
+++ b/FlatCalXP/themes/Contrast/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Contrast/nflateng.htm b/FlatCalXP/themes/Contrast/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Contrast/nflateng.htm
+++ b/FlatCalXP/themes/Contrast/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Decent/iflateng.htm b/FlatCalXP/themes/Decent/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Decent/iflateng.htm
+++ b/FlatCalXP/themes/Decent/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Decent/nflateng.htm b/FlatCalXP/themes/Decent/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Decent/nflateng.htm
+++ b/FlatCalXP/themes/Decent/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Fancy/iflateng.htm b/FlatCalXP/themes/Fancy/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Fancy/iflateng.htm
+++ b/FlatCalXP/themes/Fancy/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Fancy/nflateng.htm b/FlatCalXP/themes/Fancy/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Fancy/nflateng.htm
+++ b/FlatCalXP/themes/Fancy/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mac/iflateng.htm b/FlatCalXP/themes/Mac/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Mac/iflateng.htm
+++ b/FlatCalXP/themes/Mac/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mac/nflateng.htm b/FlatCalXP/themes/Mac/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Mac/nflateng.htm
+++ b/FlatCalXP/themes/Mac/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mini/iflateng.htm b/FlatCalXP/themes/Mini/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Mini/iflateng.htm
+++ b/FlatCalXP/themes/Mini/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mini/nflateng.htm b/FlatCalXP/themes/Mini/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Mini/nflateng.htm
+++ b/FlatCalXP/themes/Mini/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mockup/iflateng.htm b/FlatCalXP/themes/Mockup/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Mockup/iflateng.htm
+++ b/FlatCalXP/themes/Mockup/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Mockup/nflateng.htm b/FlatCalXP/themes/Mockup/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Mockup/nflateng.htm
+++ b/FlatCalXP/themes/Mockup/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Normal/iflateng.htm b/FlatCalXP/themes/Normal/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Normal/iflateng.htm
+++ b/FlatCalXP/themes/Normal/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Normal/nflateng.htm b/FlatCalXP/themes/Normal/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Normal/nflateng.htm
+++ b/FlatCalXP/themes/Normal/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Outlook/iflateng.htm b/FlatCalXP/themes/Outlook/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Outlook/iflateng.htm
+++ b/FlatCalXP/themes/Outlook/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Outlook/nflateng.htm b/FlatCalXP/themes/Outlook/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Outlook/nflateng.htm
+++ b/FlatCalXP/themes/Outlook/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/OutlookTwin/iflateng.htm b/FlatCalXP/themes/OutlookTwin/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/OutlookTwin/iflateng.htm
+++ b/FlatCalXP/themes/OutlookTwin/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/OutlookTwin/nflateng.htm b/FlatCalXP/themes/OutlookTwin/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/OutlookTwin/nflateng.htm
+++ b/FlatCalXP/themes/OutlookTwin/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Supermini/iflateng.htm b/FlatCalXP/themes/Supermini/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Supermini/iflateng.htm
+++ b/FlatCalXP/themes/Supermini/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Supermini/nflateng.htm b/FlatCalXP/themes/Supermini/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Supermini/nflateng.htm
+++ b/FlatCalXP/themes/Supermini/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Triplex/iflateng.htm b/FlatCalXP/themes/Triplex/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/Triplex/iflateng.htm
+++ b/FlatCalXP/themes/Triplex/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/Triplex/nflateng.htm b/FlatCalXP/themes/Triplex/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/Triplex/nflateng.htm
+++ b/FlatCalXP/themes/Triplex/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/xp/iflateng.htm b/FlatCalXP/themes/xp/iflateng.htm
index 792437c..fbaa613 100644
--- a/FlatCalXP/themes/xp/iflateng.htm
+++ b/FlatCalXP/themes/xp/iflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/FlatCalXP/themes/xp/nflateng.htm b/FlatCalXP/themes/xp/nflateng.htm
index 90e8d86..562a60f 100644
--- a/FlatCalXP/themes/xp/nflateng.htm
+++ b/FlatCalXP/themes/xp/nflateng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>FlatCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>FlatCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31],g445=[1,5,9,14,18,22,27,31,35,40,44,48,53];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/Classic/ipopeng.htm b/PopCalXP/demos/Classic/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/Classic/ipopeng.htm
+++ b/PopCalXP/demos/Classic/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/Classic/npopeng.htm b/PopCalXP/demos/Classic/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/Classic/npopeng.htm
+++ b/PopCalXP/demos/Classic/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/CrossFrame/ipopeng.htm b/PopCalXP/demos/CrossFrame/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/CrossFrame/ipopeng.htm
+++ b/PopCalXP/demos/CrossFrame/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/CrossFrame/npopeng.htm b/PopCalXP/demos/CrossFrame/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/CrossFrame/npopeng.htm
+++ b/PopCalXP/demos/CrossFrame/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/DateRange/ipopeng.htm b/PopCalXP/demos/DateRange/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/DateRange/ipopeng.htm
+++ b/PopCalXP/demos/DateRange/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/DateRange/npopeng.htm b/PopCalXP/demos/DateRange/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/DateRange/npopeng.htm
+++ b/PopCalXP/demos/DateRange/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/HelloWorld/ipopeng.htm b/PopCalXP/demos/HelloWorld/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/HelloWorld/ipopeng.htm
+++ b/PopCalXP/demos/HelloWorld/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/HelloWorld/npopeng.htm b/PopCalXP/demos/HelloWorld/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/HelloWorld/npopeng.htm
+++ b/PopCalXP/demos/HelloWorld/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/Netscape4/ipopeng.htm b/PopCalXP/demos/Netscape4/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/Netscape4/ipopeng.htm
+++ b/PopCalXP/demos/Netscape4/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/Netscape4/npopeng.htm b/PopCalXP/demos/Netscape4/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/Netscape4/npopeng.htm
+++ b/PopCalXP/demos/Netscape4/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/RangePicker/ipopeng.htm b/PopCalXP/demos/RangePicker/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/RangePicker/ipopeng.htm
+++ b/PopCalXP/demos/RangePicker/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/RangePicker/npopeng.htm b/PopCalXP/demos/RangePicker/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/RangePicker/npopeng.htm
+++ b/PopCalXP/demos/RangePicker/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/WeekPicker/ipopeng.htm b/PopCalXP/demos/WeekPicker/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/demos/WeekPicker/ipopeng.htm
+++ b/PopCalXP/demos/WeekPicker/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/demos/WeekPicker/npopeng.htm b/PopCalXP/demos/WeekPicker/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/demos/WeekPicker/npopeng.htm
+++ b/PopCalXP/demos/WeekPicker/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/engines/ipopeng.htm b/PopCalXP/engines/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/engines/ipopeng.htm
+++ b/PopCalXP/engines/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/engines/npopeng.htm b/PopCalXP/engines/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/engines/npopeng.htm
+++ b/PopCalXP/engines/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Contrast/ipopeng.htm b/PopCalXP/themes/Contrast/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Contrast/ipopeng.htm
+++ b/PopCalXP/themes/Contrast/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Contrast/npopeng.htm b/PopCalXP/themes/Contrast/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Contrast/npopeng.htm
+++ b/PopCalXP/themes/Contrast/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/DateTime/ipopeng.htm b/PopCalXP/themes/DateTime/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/DateTime/ipopeng.htm
+++ b/PopCalXP/themes/DateTime/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/DateTime/npopeng.htm b/PopCalXP/themes/DateTime/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/DateTime/npopeng.htm
+++ b/PopCalXP/themes/DateTime/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Double/ipopeng.htm b/PopCalXP/themes/Double/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Double/ipopeng.htm
+++ b/PopCalXP/themes/Double/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Double/npopeng.htm b/PopCalXP/themes/Double/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Double/npopeng.htm
+++ b/PopCalXP/themes/Double/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Fancy/ipopeng.htm b/PopCalXP/themes/Fancy/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Fancy/ipopeng.htm
+++ b/PopCalXP/themes/Fancy/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Fancy/npopeng.htm b/PopCalXP/themes/Fancy/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Fancy/npopeng.htm
+++ b/PopCalXP/themes/Fancy/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Mac/ipopeng.htm b/PopCalXP/themes/Mac/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Mac/ipopeng.htm
+++ b/PopCalXP/themes/Mac/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Mac/npopeng.htm b/PopCalXP/themes/Mac/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Mac/npopeng.htm
+++ b/PopCalXP/themes/Mac/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Mini/ipopeng.htm b/PopCalXP/themes/Mini/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Mini/ipopeng.htm
+++ b/PopCalXP/themes/Mini/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Mini/npopeng.htm b/PopCalXP/themes/Mini/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Mini/npopeng.htm
+++ b/PopCalXP/themes/Mini/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Normal/ipopeng.htm b/PopCalXP/themes/Normal/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Normal/ipopeng.htm
+++ b/PopCalXP/themes/Normal/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Normal/npopeng.htm b/PopCalXP/themes/Normal/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Normal/npopeng.htm
+++ b/PopCalXP/themes/Normal/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Outlook/ipopeng.htm b/PopCalXP/themes/Outlook/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Outlook/ipopeng.htm
+++ b/PopCalXP/themes/Outlook/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Outlook/npopeng.htm b/PopCalXP/themes/Outlook/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Outlook/npopeng.htm
+++ b/PopCalXP/themes/Outlook/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/OutlookTriplexVertical/ipopeng.htm b/PopCalXP/themes/OutlookTriplexVertical/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/OutlookTriplexVertical/ipopeng.htm
+++ b/PopCalXP/themes/OutlookTriplexVertical/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/OutlookTriplexVertical/npopeng.htm b/PopCalXP/themes/OutlookTriplexVertical/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/OutlookTriplexVertical/npopeng.htm
+++ b/PopCalXP/themes/OutlookTriplexVertical/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/OutlookTwin/ipopeng.htm b/PopCalXP/themes/OutlookTwin/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/OutlookTwin/ipopeng.htm
+++ b/PopCalXP/themes/OutlookTwin/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/OutlookTwin/npopeng.htm b/PopCalXP/themes/OutlookTwin/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/OutlookTwin/npopeng.htm
+++ b/PopCalXP/themes/OutlookTwin/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Supermini/ipopeng.htm b/PopCalXP/themes/Supermini/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/Supermini/ipopeng.htm
+++ b/PopCalXP/themes/Supermini/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/Supermini/npopeng.htm b/PopCalXP/themes/Supermini/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/Supermini/npopeng.htm
+++ b/PopCalXP/themes/Supermini/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/xp/ipopeng.htm b/PopCalXP/themes/xp/ipopeng.htm
index 33200f9..238450a 100644
--- a/PopCalXP/themes/xp/ipopeng.htm
+++ b/PopCalXP/themes/xp/ipopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <script type='text/javascript'>
 var gd=new Date(), gToday=[gd.getFullYear(),gd.getMonth()+1,gd.getDate()];
 var ua=navigator.userAgent.toLowerCase();
@@ -9,6 +9,20 @@
 var NN4=false,NS6=ua.indexOf("netscape6/6.0")!=-1,IE4=IE&&!document.getElementById,IE5=IE&&![].push&&!IE4;
 var gfSelf=fGetById(parent.document,self.name);
 var gTheme=self.name.split(":");
+if (/[\\'("`;\r\n]/.test(self.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = self.name;
+    // Set default values for subsequent script tags
+    self.name="gToday:normal:agenda.js";
+    gTheme=self.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=parent,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/PopCalXP/themes/xp/npopeng.htm b/PopCalXP/themes/xp/npopeng.htm
index d0f029f..b5d2b1b 100644
--- a/PopCalXP/themes/xp/npopeng.htm
+++ b/PopCalXP/themes/xp/npopeng.htm
@@ -1,6 +1,6 @@
 <html>
 <head>
-<title>PopCalendarXP 10.0.0 - Copyright Idemfactor Solutions, Inc.</title>
+<title>PopCalendarXP 10.0.1 - Copyright Idemfactor Solutions, Inc.</title>
 <style type="text/css">
 .cxpNS {text-align:left;}
 .cxpLT {text-decoration:line-through;}
@@ -13,6 +13,20 @@
 var MAC=ua.indexOf('mac')!=-1,NN4=true,OP=NS6=IE5=IE4=IE=KO3=KO=SA=SA1=GK=OP8=false;
 var gfSelf=this;
 var gTheme=this.name.split(":");
+if (/[\\'("`;\r\n]/.test(gfSelf.name) 
+    || /[\.]/.test(gTheme[0]) 
+    || (gTheme[2]&&gTheme[2].substring(0,6)=="share[" && /[\.]/.test(gTheme[2]))
+    || /[\.]/.test(gTheme[3])) {
+    var offendingName = gfSelf.name;
+    // Set default values for subsequent script tags
+    gfSelf.name="gToday:normal:agenda.js";
+    gTheme=gfSelf.name.split(":");
+    var err = ("This version of CalendarXP tries to avoid malicious XSS input but may fail passing benign parameters." 
+        + "\n******** Offending iframe name: ********\n" + offendingName + "\n************************\n");
+    console.log(err);
+    alert(err);
+    throw new Error(err);
+}
 var gCurMonth=eval(gTheme[0]); gCurMonth=fCalibrate(gCurMonth[0],gCurMonth[1]);
 var gContainer=self,gDays=[31,31,28,31,30,31,30,31,31,30,31,30,31];
 var fOnResize,fRepaint,fHoliday,fOnChange,fAfterSelected,fOnDrag,gcOtherDayBG,fOnWeekClick,fIsSelected,fParseInput,fFormatInput,fOnDoWClick,fOnload;
diff --git a/duplicate.sh b/duplicate.sh
new file mode 100755
index 0000000..22d0357
--- /dev/null
+++ b/duplicate.sh
@@ -0,0 +1,12 @@
+#! /bin/bash
+
+set -e
+
+for t in Pop Flat ; do
+    for s in "${t}CalXP"/{demos,themes}/*/{i,n}"${t,,}eng.htm" ; do
+        if [[ ! "${s}" =~ \* ]] ; then
+            cp -av "${s%%/*}/engines/${s##*/}" "${s}"
+        fi
+    done
+done
+