I'm not super concerned about history injection other than when blindly clicking the back button. I've used history injection in a legitimate use case requested

I'm not super concerned about history injection other than when blindly clicking the back button. I've used history injection in a legitimate use case requested by users (think master/detail when linking directly to a detail view; back goes back to the master list). I'm not sure how to unobtrusively notify of malicious history injection (like news sites) without downgrading legitimate uses. Hopefully the answer isn't another permissions request :)