FIX: missing BBCODE whitelists

FEATURE: ability whitelist a RegExp