Researchers are warning that attackers could, in the worst case, use WebGL to inject malicious code onto a system. They believe that the 3D standard, which is now supported by almost all browsers, is not yet ready for primetime