The display name is sanitized through `sanitize_text_field`, `wp_filter_kses`, and `_wp_specialchars`. see #30724. Built from https://develop.svn.wordpress.org/trunk@30901 git-svn-id: http://core.svn.wordpress.org/trunk@30891 1a063a9b-81f0-0310-95a4-ce76da25c4cd