Ok cool. I think we can assume that `display` will only contain an allowed value for the `display` CSS attribute. If it doesn't, then the calling code is at fault, not this code.