When navigating to a website like https://bsky.app/ or https://google.com, the location prompt is shown eagerly. I invesigated this and found that navigation.permissions.query returns granted even though the user hasn't been prompted yet. This false positive causes the websites to go ahead with navigation.geolocation.getCurrentPosition calls on page init which would explain the very eager permission check, rather than after a normal user interaction that requires it.
Given:
navigator.permissions.query({name: "geolocation"}).then(console.log)
Orion:
[Log] PermissionStatus {state: "granted", name: "geolocation", onchange: null, addEventListener: function, removeEventListener: function, …}
Safari:
[Log] PermissionStatus {state: "prompt", name: "geolocation", onchange: null, addEventListener: function, removeEventListener: function, …}
navigator.permissions.query returns prompt state to signal to the web app that no explicit permission has been granted yet.
Version 0.99.136-beta (WebKit 622.1.15.19.2)
Sequoia (15)
