Disable3DAPIs

Signed-off-by: Tommy <contact@tommytran.io>

Linux/managed.json

@@ -56,6 +56,7 @@
   "ConfigureDoNotTrack": true,
   "DefaultShareAdditionalOSRegionSetting": 2,
   "DiagnosticData": 0,
+  "Disable3DAPIs": true,
   "Edge3PSerpTelemetryEnabled": false,
   "EdgeCollectionsEnabled": false,
   "EdgeEDropEnabled": false,

README.md

@@ -9,13 +9,15 @@ For corporate environments, you will need make approprieate changes, including b
 - Set `DefaultWebUsbGuardSetting` to "Block". In most cases, the websites will never need to use this API. I need it to flash GrapheneOS and StockOS on my phones.
 - Set `DefaultJavaScriptJitSetting` to "Block". This will prevent users from adding exceptions to Enhanced Security Mode.
 - Further restrict permissions that websites can prompt for.
-- Consider enabling `Disable3DAPIs`. This will break sites that depend on WebGL, so whether to do this highly depends on your organization.
+- Consider removing the `Disable3DAPIs` policy. Currently, WebGL is disabled in my policies and a few sites will break, so whether to do this highly depends on your organization.
 - Consider mandating that `SmartScreenEnabled` is set to disabled. `TyposquattingCheckerEnabled` is also potentially invasive, though I have not confirmed this. Please make an issue to let me know of your findings.
 
 ## Linux
 
 The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json`
 
+The
+
 ## macOS
 
 The mandatory prolicies should be put in `/Library/Managed Preferences/com.microsoft.Edge.plist`, and the recommended policies should be put in `/Library/Preferences/com.microsoft.Edge.plist`

macOS/Managed Preferences/com.microsoft.Edge.plist

@@ -120,6 +120,8 @@
     <integer>2</integer>
     <key>DiagnosticData</key>
     <integer>0</integer>
+    <key>Disable3DAPIs</key>
+    <true />
     <key>Edge3PSerpTelemetryEnabled</key>
     <false />
     <key>EdgeCollectionsEnabled</key>