chromium/third_party/blink/web_tests/http/tests/navigation/pushstate-updates-referrer.html

<script>
if (window.testRunner) {
  testRunner.dumpAsText();
  testRunner.waitUntilDone();
}

onload = function() {
  history.pushState(null, null, "/foo");

  sessionStorage.expectedReferrer = location.href;
  location = "/navigation/resources/check-referrer.html";
}
</script>