FORUM-751: XSS with bbcode tag which support attribute like size, color, url

Fix description:
- BBCode engine filter out some illegal characters like " , ' , ;
- Avoid using replaceAll to improve performance.