this BBCode XSS just flew over us again. (credit goes to Silvea12 for this c:)
Merge pull request #91 from nepeat/master

BBCode XSS fix. (again)