FORUM-751: XSS with bbcode tag which support attribute like size, color,...

... url