It should not be possible to replace an entry in the browser history which
belongs to another domain.

But, creative use of browser APIs.
https://twitter.com/codinghorror/status/1032532290482499584