If you're at the point where someone can inject random code into your site, you've already lost and have so many more problems than access to localStorage.