Yes, use per-user domains to make sure that things like localStorage, which is domain-associated, is not leaked from one script to another.