Disable pushState and the rest of the history API in packaged apps via runtime-enabled features

chrome/renderer/resources/extensions/platform_app.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 /**
  * Returns a function that throws a 'not available' exception when called.
  *
  * @param {string} messagePrefix text to prepend to the exception message.
  */
 function generateDisabledMethodStub(messagePrefix, opt_messageSuffix) {
@@ skipping 61 matching lines @@
   });
 }
 
 // Disable document.open|close|write|etc.
 disableMethods(HTMLDocument.prototype, 'document',
     ['open', 'clear', 'close', 'write', 'writeln']);
 
 // Disable history.
 window.history = {};
 disableMethods(window.history, 'history',
-    ['back', 'forward', 'go', 'pushState', 'replaceState']);
-disableGetters(window.history, 'history', ['length', 'state']);
+    ['back', 'forward', 'go']);
+disableGetters(window.history, 'history', ['length']);
 
 // Disable find.
 disableMethods(Window.prototype, 'window', ['find']);
 
 // Disable modal dialogs. Shell windows disable these anyway, but it's nice to
 // warn.
 disableMethods(Window.prototype, 'window', ['alert', 'confirm', 'prompt']);
 
 // Disable window.*bar.
 disableGetters(window, 'window',
@@ skipping 27 matching lines @@
     'onbeforeunload', generateDisabledMethodStub('onbeforeunload'));
 Window.prototype.__defineSetter__(
     'onunload', generateDisabledMethodStub('onunload'));
 var windowAddEventListener = Window.prototype.addEventListener;
 Window.prototype.addEventListener = function(type) {
   if (type === 'unload' || type === 'beforeunload')
     generateDisabledMethodStub(type)();
   else
     return windowAddEventListener.apply(window, arguments);
 };