Microsoft declares WebGL 'harmful' to security

[Airbot]

A security firm raised new concerns today about WebGL--but Microsoft piled on with an opinion that's likely more damaging to fans' hopes for a universal 3D Web graphics standard.


"We believe that WebGL will likely become an ongoing source of hard-to-fix vulnerabilities," Microsoft said today in a security blog post flatly titled "WebGL Considered Harmful." "In its current form, WebGL is not a technology Microsoft can endorse from a security perspective."


The move effectively kills WebGL fans' hopes, at least for now, that WebGL could become a standard Web programmers could count on finding in modern browsers. And that means one hot area of programming, games development, won't have an easy, unified way to tackle Web-based software.

more..

Related:
WebGL is just too dangerous to support, says Microsoft
Cross-domain WebGL textures disabled in Firefox 5

 

[Phone Man]

By default FF4 uses WebGl. I went into about:config and have it disabled and have not seen any problems with web sites.

In about:config search for webgl.disabled and mark it True

Jim

 

[logicearth]

Yes it's because IE9 using Direct 3D and MS don't like WebGl but MS is right for one time.
I Reminder that WebGl is currently used for Firefox, Opera and Safari.

No, WebGL is different then what Microsoft did with IE 9. Only IE has access to the DirextX stuff to accelerated finely controlled components. WebGL gives websites access to this low graphics layer in a not so controlled way. Its a completely different system. It has nothing to do with the work Microsoft did with IE 9 and hardware acceleration with DirectX. Because that stuff is not accessible to websites.

In either case, if Microsoft were to implement WebGL it would just be an interface to DirectX.