Use noscript and whitelist urls as needed. Pages that dont need javascript dont get to use it, and for pages that do need it, you can make sure it only runs exactly what it needs to.