[ScottBurson]

It does cost you something if that code has security holes.

[captn3m0]

Most of these features also rely on user-approvals so it is not as if every website is going to jump on and start using GeoLocation APIs just because they can.

It is a nice study showing how far these niche new features have reached, but that shouldn't affect how we are working on the new ones (except perhaps improving the security models of these).

[jbob2000]

That's a big if. Anything could have security holes, seems pedantic to kill a feature because it might have a security hole at some point.

[creshal]

> That's a big if.

Reminder that we've been issuing so many CVEs last year we had to upgrade the numbering spec to allow for more than ten thousand a year.