Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.
bypassing xss filter
I know this article it is realy useful. I found another option to complete the same thing, but I am still interested in old question (I am not really sure it can even be bypassed). Example: I can add for example:
javascript:alert(document.cookie)
into BB img tag (with some variatons). It create output in html:
<img src="http://javascript:alert(document.cookie)">
As you see it add http:// which disable javascript, so I am asking for a way to bypass this.