Hello,

I´ve added a custom Twitter BBCode in our ACP like this:

BBCode:

[twitter]{TEXT}[/twitter]

HTML:

<a target="_blank" href="{TEXT}">Klicke hier, um zum Tweet zu gelangen.</a>

Now a user has tried to create a post with this BBCode like this:

[twitter]https://twitter.com/Twitter/status/1380306486962782208[/twitter]

and PHPBB has changed it to:

<a target="_blank" href="[twitter]">Klicke hier, um zum Tweet zu gelangen.</a>

Please note: The lower security of {TEXT} is known to me, but {URL} didn't work that well for me.