change url js without security issues code example

Example 1: java script change url without reload

window.history.replaceState({}, '','/dashboard');

Example 2: change url without reloading

function processAjaxData(response, urlPath){
     document.getElementById("content").innerHTML = response.html;
     document.title = response.pageTitle;
     window.history.pushState({"html":response.html,"pageTitle":response.pageTitle},"", urlPath);
 }