This test makes sure that calls to pushState() and replaceState() with URLs that violate the security origin check fail as expected.