Specify rate limiter for navigation, history traversal, and pushState/replaceState

This returns instead of throws for web compat.

Fixes #11108. Fixes #11410.

Author: zcorpan

source

@@ -99000,6 +99000,10 @@ interface <dfn interface>History</dfn> {
    <li><p>If <var>document</var> is not <span>fully active</span>, then throw a
    <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.</p></li>
 
+   <li><p>If <var>history</var>'s <span>relevant global object</span>'s <span
+   data-x="window-navigable">navigable</span> is not <span>allowed to perform a navigation or
+   history update</span>, then return.</p></li>
+
    <li><p>If <var>delta</var> is 0, then <span>reload</span> <var>document</var>'s <span>node
    navigable</span>, and return.</p></li>
 
@@ -99037,10 +99041,9 @@ interface <dfn interface>History</dfn> {
    <li><p>If <var>document</var> is not <span>fully active</span>, then throw a
    <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.</p></li>
 
-   <li><p>Optionally, throw a <span>"<code>SecurityError</code>"</span> <code>DOMException</code>.
-   (For example, the user agent might disallow calls to these methods that are invoked on a timer,
-   or from event listeners that are not triggered in response to a clear user action, or that are
-   invoked in rapid succession.)</p></li>
+   <li><p>If <var>history</var>'s <span>relevant global object</span>'s <span
+   data-x="window-navigable">navigable</span> is not <span>allowed to perform a navigation or
+   history update</span>, then return.</p></li>
 
    <li><p>Let <var>serializedData</var> be
    <span>StructuredSerializeForStorage</span>(<var>data</var>). Rethrow any exceptions.</p></li>
@@ -104282,6 +104285,11 @@ interface <dfn interface>NotRestoredReasons</dfn> {
 
     <p class="note">This is only ever set to true in cases where the navigable's <span
     data-x="nav-parent">parent</span> is non-null.</p>
+   </li>
+
+   <li><p>An <dfn>allowed to perform a navigation or history update</dfn> algorithm, which
+   <span>implementation-defined</span>. It returns true if the operation is allowed to proceed, and
+   false otherwise.</p></li>
   </ul>
 
   <p>The <span data-x="nav-current-history-entry">current session history entry</span> and the
@@ -107474,6 +107482,9 @@ location.href = '#foo';</code></pre>
    intersection-observing a lazy loading element</span> <var>container</var> and set
    <var>container</var>'s <span>lazy load resumption steps</span> to null.</p></li>
 
+   <li><p>If <var>navigable</var> is not <span>allowed to perform a navigation or history
+   update</span>, then return.</p></li>
+
    <li id="navigate-convert-to-replace">
     <p>If <var>historyHandling</var> is "<code
     data-x="NavigationHistoryBehavior-auto">auto</code>":</p>