javascript - Do I need to encode window.location.hostname when saving to cookie

Question

my Fortify scan is complaining about saving unvalidated data to cookie. To be exact it does not like that I use window.location.hostname directly when saving to cookie. Is is false positive? Do I really need to encode window.location.hostname like in example below?

const encodedHostname = encodeURI(window.location.hostname);

question from:https://stackoverflow.com/questions/65842547/do-i-need-to-encode-window-location-hostname-when-saving-to-cookie

Answer 1

Waitting for answers