you should probably worry about untrusted data in text and use a tagged template function that sanitizes its inputs for insertion in html.