Discourse quote BBCode section may be vulnerable to username injection

(topic deleted by author)