Security researchers identified serious vulnerability in WebGL -which is turned on by default for Firefox and Chrome browsers – allows attackers to run malicious code on users Computers. We’ve covered how to disable WebGL in Firefox 4, here is how to disable WebGL in Google Chrome browser.
WebGL brings hardware accelerated 3D graphics to the browsers without need of installing additional software. A Security consultancy company Context has more details about the vulanerability in WebGL and the best way to stay secure is to by disabling WebGL in Browsers.
According to the page at Context “this vulnerability allows attackers to provide malicious code via a web browser which allows attack on the GPU and graphics drivers. These attacks on the GPU via WebGL can render entire machines unusable.”
Disabling WebGL in Google Chrome
May 31, 2017 Update : In Chrome 57 or above,
1. Visit chrome://flags or chrome://flags/#enable-es3-apis
2. Use to Ctrl+f to find webGL2.0 setting and set it to Disabled.
3. Relaunch Chrome browser.
1. Right click on Chrome shortcut on the desktop, click Properties append
after chrome.exe in the Target field as shown below in the screenshot.
2. Click “Apply” and ‘Ok’ to save changes.
Update: Even better one, try this: just visit chrome://flags/#disable-webgl in browser, click on ‘Enable’ link, scroll down to bottom and click on ‘Relaunch now’ to restart the browser for the changes to apply. Update: The flag is no longer available, it has been removed by Google, you better try running Chrome with command line switch mentioned above to disable webGL in browser.
We can confirm this will disable WebGL for Chrome as you may still get “Browser could not initialize WebGL” message when you run any one of WebGL experiments in Chrome, check the screenshot below.
We’ll update this post if we found more official information if any from Chrome team or from other sources on the current issue. Stay tuned.