BBCode XSS fix.
Merge pull request #90 from nepeat/master

BBCode XSS fix.