2010: WebGL setup tag #605

This commit is contained in:
Thorin-Oakenpants 2019-06-29 02:52:41 +00:00 committed by GitHub
parent ed735f875c
commit b80c515e88
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -921,6 +921,8 @@ user_pref("media.peerconnection.enabled", false);
user_pref("media.peerconnection.ice.default_address_only", true);
user_pref("media.peerconnection.ice.no_host", true); // [FF51+]
/* 2010: disable WebGL (Web Graphics Library)
* [SETUP-WEB] When disabled, may break some websites. When enabled, provides high entropy,
* especially with readPixels(). Some of the other entropy is lessened with RFP (see 4501)
* [1] https://www.contextis.com/resources/blog/webgl-new-dimension-browser-exploitation/
* [2] https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern ***/
user_pref("webgl.disabled", true);