Is there an offical Mozilla recommendation for the WebGL security vulnerability?
Some news organizations are reporting that "The web standard known as WebGL opens the browsers to serious attacks, including the remote execution of malicious code, independent research consultancy Context Information Security recently warned." http://www.theregister.co.uk/2011/05/11/chrome_firefox_security_threat/
Does Mozilla recommend that end-users disable WebGL?
Is there any fix or patch coming for this?
Some [https://www.google.com/news/more?q=webgl+firefox&hl=en&biw=1200&bih=1791&prmd=ivnsu&um=1&ie=UTF-8&ncl=d2ROLF6dQ_coInMalzskHMlClD_uM&ei=YuPKTbWYCsTTgQea5az7Bg&sa=X&oi=news_result&ct=more-results&resnum=1&ved=0CCwQqgIwAA news organizations are reporting] that "The web standard known as WebGL opens the browsers to serious attacks, including the remote execution of malicious code, independent research consultancy Context Information Security recently warned."
http://www.theregister.co.uk/2011/05/11/chrome_firefox_security_threat/
Does Mozilla recommend that end-users disable WebGL?
Is there any fix or patch coming for this?
所有回复 (1)
I have not seen anything official from Mozilla, but if you are concerned then disable WebGL as shown in the link you posted.
For the benefit of others, to disable WebGL
- Type about:config into the location bar and press enter
- Accept the warning message that appears, you will be taken to a list of preferences
- Locate the preference webgl.disabled, double-click on it to change its value to true