You can create a script tag, then do a history.pushState( {} , 'ERP', "test"); this will change the url, but you have to be very mindful when you do that. What I would recommend is you add a token to the page, then use a query, URLRoot()&"db/"&Dbid()&"?a=s&query={"&URLEncode("'<fid>'.EX.'"&[<token>]&"'")&"}&opts=disprec" then you can pushState back to the query string which will keep the whole thing covered. I am currently use this to allow access but hide the record id, or when a customer takes a survey I hide the parameters. The tokens are usually sha1 forward security hashes but you can use whatever you want, feel free to message me.