I get your point. However, this isn't a fix, it is, according to the article, a volunerability that allows "remote execution of malicious code". People who know WebGL better than I do would probably know more about what specific exploits it facilitates.