javascript proof-of-concept single-page-app pushstate cybersecurity web-security offensive-security browser-history red-team history-api web-application-security security-research client-side-security popstate browser-security frontend-security attack-simulation navigation-behavior ui-security ux-security