Comment by Incipient

You don't/can't. You have to trust the server is sending you trustworthy js.

The only more tamper-resistant approach would be a browser extension, or a native application. Both have much higher friction.