Description of the problem
WebVR Polyfill calls enableVertexAttribArray() which can cause attributes states cached by the WebGLState to become invalid.
Three.js version
I've encountered this problem in code that uses old version of Three.js. The result was an invalid attribute buffer being used instead of a default passed by gl.vertexAttrib3fv. Unfortunately, I don't have a minimal PoC or a code that reproduces this in the newest Three.js. The code in https://github.com/mrdoob/three.js/blob/dev/src/renderers/webgl/WebGLState.js#L424 indicates that the newest Three.js can still have this issue, but I might be missing something.