The history stack shouldn't be controlled by any loaded sites. The browser needs to treat websites as hostile.