http-nihilist.go

package main

func cors(h http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
  	w.Header().Set("Access-Control-Allow-Methods", "DELETE")
  	h(w, r)
	})
}

http-nihilist.js

window.onpopstate = function(ev) {
  with(new XMLHttpRequest)
    addEventListener("load", function(){ document.body.parentElement.innerHTML = this.responseText }),
    addEventListener("error", function(){ document.body.parentElement.innerHTML = "it broke" }),
    open("DELETE", window.location),
    send();
}

Array.prototype.forEach.call(document.getElementsByTagName("a"),function(el){
  el.addEventListener("click", function(){ history.pushState(this.href,"", this.href) ; return false })
})