Prevent Javascript from manipulating browser history

  • Open the about:config page in Firefox
  • Search for "pushstate"
  • Double-click "browser.history.allowPushState"

Note that not all browser history manipulation is bad. It can be used for valid reasons.