Hi Peter

Totara uses the default settings HTML Purifier library to allow HTML that it regarded as safe plus a few additions as described here . It is possible to customise the whitelist if you accept the risks

regards