Yes that's correct. By tapping into the core OS you can utilize the GPS functionality, but for security reasons those features are not available to any website that wants it.
So, just to clarify, you are saying it's not possible on a mobile website?
Apparently it's possible using a mobile browser on a GPS-enabled device. I've never tried it though.