Grant this origin Precise location. Keep this tab open and in the foreground long enough to acquire a GPS fix, then leave it running in another tab while attacker.html oscillates.