Lets say for example I have to use a public online proxy like https://www.zend2.com

to load a php webpage controlled by me containing sensitive data over https.

How would i make sure that the proxy in the middle doesn't have insight in the data (without modifying the client (browser), js / additional domain names & servers only.

The solutions only goal is to prevent the public proxy attack layer. (theoretical)