Is there something I can use to sanitize variables I want to use in

queryRawUnsafe

I have been running a couple tests on this, using Parameterized queries did better in some cases, but it's very likely not a definitive solution. You might be better off using Parameterized queries and also sanitizing with another library and escaping characters with it

what other library you suggest?

I haven't used these for a while now, last one I used was js-string-escape if I remember correctly. But you can achieve this using JS replace() method and some Regex