A browser feature I wasn't aware of for too long: long press the back button, to get a list of recent URLs, allowing you to skip anything trying to hijack the back button.
That’s surely bounded now much it can show, so an attacker can just fill it up till the api throws an error
Or right click
That’s surely bounded now much it can show, so an attacker can just fill it up till the api throws an error