I'd like to see BBCode permissions for both poke and private text messages. This is a security flaw where people can send masked links via pokes and private text messages.