Check for allowed BBCodes

Closes #18