NoScript

There is a specific WebGL block, like the way NoScript blocks Java or Flash. See http://noscript.net/changelog and search for WebGL. Probably a belt and braces thing: if you block WebGL and JS, then even if you accidentally allow all JS on a site you are still safe against WebGL exploits. JS generally seems safer than JS+WebGL, given the novelty of potentially web-exploitable GPUs.