Hi,
It seems it's a bug of ie11. I am not sure whether it exists in ie10.
Internet Explorer send original URL as referrer after changing url using history.pushState. Chrome and Firefox send the changed url as referrer.
here is the demo:
http://jsbin.com/qiximeziyihi/22
thanks.