firefox-debloat icon indicating copy to clipboard operation
firefox-debloat copied to clipboard

Published 20 hours ago • verified publisher icon amq

Recommendation to disable WebGL

Open orchid-hybrid opened this issue 9 years ago • 1 comments

Recommend disabling WebGL for security purposes:

  • http://blogs.technet.com/b/srd/archive/2011/06/16/webgl-considered-harmful.aspx
  • http://security.stackexchange.com/a/13840
  • https://github.com/x0r1/jellyfish

see also my mailing list post: http://lists.gnu.org/archive/html/bug-gnuzilla/2015-06/msg00005.html

orchid-hybrid avatar Jun 26 '15 00:06 orchid-hybrid

Microsoft added WebGL in Edge:

https://blogs.windows.com/msedgedev/2015/04/29/introducing-microsoft-edge-the-browser-built-for-windows-10/

http://blogs.windows.com/msedgedev/2015/05/07/bringing-asm-js-to-chakra-microsoft-edge/

It looks like the only security vulnerability discovered to time has been fixed in WebGL spec 1.0.1 (denial of service issue is yet to be fixed) as described here:

https://www.khronos.org/webgl/security/

amq avatar Jun 28 '15 12:06 amq