DNN 4.9.0 introduces the new Text skin object, which supports TokenReplace, i.e. you may access to most of the User properties (including membership and user profile), portal, host and tab properties as well. I am currently writing a documentation for TokenReplace, which will list all of the tokens available and its scope.
To use the Text token in a HTML skin DNN 4.9.0, you need to register the skin object manually. To enable TokenReplace, set Property "ReplaceTokens" to "True".