I am doing a penetration test on a web application and it is using
window.history.back() to go back to the previous page. Is this safe to use?
For example, if I visit google.com and then go to the web application and then press back, it would present me with google.com again. Similarly, if an attacker could somehow simulate this in an iframe (if that gets stored in the window's history) or if the user visits the URL (but that would be pointless) or possibly alter some sort of caching mechanism. What real ways are there to exploit this?
Is this an actual issue or am I overthinking?