BBCode XSS fix. (again)