Using cookie values in html script template literal is unsafe?

[janat08]

I'm trying to use cookies for tracking items in cart. I don't know if there's anything that sanitizes stuff before it gets into DB on hono, but I assume that the cookie stuff surely doesn't get sanitized when I put in it script tag for Paypal buttons. I could read the cookies on server side, but that would like be the same problem, if hono doesn't sanitize cookies. It isn't really a problem in terms of xss, but I can see myself doing past purchases eventually where the value gets stored, to then do something like latest purchases feed.