[STIG] Disable 3D graphics APIs

[RoyalOughtness]

https://static.open-scap.org/ssg-guides/ssg-chromium-guide-stig.html#xccdf_org.ssgproject.content_rule_chromium_disable_3d_graphics_api

[DemiMarie]

This will break at least some (arguably buggy) websites that do not have a fallback for when WebGL is disabled.

[RKNF404]

@DemiMarie It will not be by default but an option.

[RoyalOughtness]

@RKNF404 we could disable it by default though and allow toggling it back on?

[DemiMarie]

@RoyalOughtness Ideally on a per-site basis.

[RoyalOughtness]

That would increase the implementation complexity I think, but that could be a follow up item

[RKNF404]

@RoyalOughtness you mean disable WebGL by default or disable the toggle by default?

@DemiMarie like Royal said, it is a lot of extra work to get an extra content permission and add checks for it. In the long term most likely, but not right now.

[RoyalOughtness]

disable webgl by default, and then whatever that means for the toggle 😄