4 ms·

Updating the hash of a URL doesn't (or shouldn't) make a request to the server, so your abstract employee hero is safe.

• kgwxd 8y ago
  The abstract company villan has access to the locally stored history too.
  • ceejayoz 8y ago
    That's what history.replaceState() instead of history.pushState() is for.
    • kgwxd 8y ago
      They have monitors on all javascript calls the browser makes too, "for security".