There are no restricted tags currently. This may change in the future, but now you can use anything.
You are right, however, we will run the code through a security parser and for example, convert links and remove object tags or iframes. User application security is an ongoing project for us and the parsing rules may change over time. As we ...