The document.location data in browsers is generally inaccessible to scripts, because allowing access would give any given site access to your entire browsing history. At most you can do a few simple manipulations, like "go to history entry #37" or "go back one page". But you can't do "what was the address of the page in history entry #23".
Most banking sites will use javascript links to prevent a click history from being built up. They'll do document.location.replace" to kill the last history entry (the current page) and replace it with the address of a new page. It in effect removes the "back" option to go back a page, because the previous page (as far as the browsing history is concerned) is now the new page.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…