cors

corscors Microsoft last month took the unusual step of publicly condemning WebGL, an open alternative to its Windows DirectX graphics API, because of what it saw as potential security problems. "In its current form, WebGL is not a technology Microsoft can endorse from a security The WebGL specification has since been revised to disallow the use of cross-domain media. WebGL provides hardware-accelerated 3-D graphics in the browser without a plug-in. It is a critical component to browser makers aiming to support entertainment and graphics applications that compete with the sophisticated graphics capabilities of desktop apps. Google currently hosts an online showcase to illustrate the potential of the technology. A spokesperson from The Khronos Group, which published the WebGL


1.0 specification in March, said last month that browser vendors are still working to make their WebGL implementations conform with the specification. The group's spokesperson also addressed Microsoft's concern about denial-of-service attacks that could arise from shaders and geometry designed to crash graphics hardware. "Browser vendors are still in the process of supporting the GL_ARB_robustness extension, so it is expected that the previously reported denial-of-service issues are still present," Khronos' spokesperson said. "It is expected that the reported denial-of-service issues will be solved with the integration of this extension."

cors