Yeah, I was running into 177 before making this change, with a username like `foø`.

There could potentially be an injection vector without this change. If or when we start allowing a wider range of characters in usernames, we'd need to be careful to sanitize the string before injecting it into the DOM.