Navigator 3.0, when data tainting is enabled
history.next
The next property of the History object is a read-only string that contains the URL of the document after the current one in the history array.
"History", "History.previous"