It looks like all special characters, particular "/", are allowed when using the Field type Username.
However links form userlists to user profiles using special characters in the username result in errors (e.g. a.o."URL not available on this website".