けんき
says to
YSITD
http://stackoverflow.com/questions/37372146/bbcode-with-xss-escape