Comment by greggman

Those 3 links are all to the same issue that was closed long ago and funded by MS as FUD.

There haven't been any real WebGL exploits I know of. No you can't upload arbitrary shaders either. They're validated and then re-written by the browsers.