Do I need to encode [removed].hostname when saving to cookie

Question

my Fortify scan is complaining about saving unvalidated data to cookie. To be exact it does not like that I use window.location.hostname directly when saving to coo