use strict;
use warnings;

use HTML::BBCode;

my $bbcode = q~[color=blue" onmouseover="this.innerHTML = 'XSS']test[/color]~;
my $bbc = HTML::BBCode->new( {
    no_html      => 1,
    no_jslink    => 1,
    linebreaks   => 1,
} );
print $bbc->parse($bbcode);
print "\n";