Deprecate XSLT in Browsers?
2025-08-15
Browsers' built-in XSLT processor (v1.0, standardized in 1999) is outdated and poses security risks. Modern web development uses JavaScript and JSON, rendering XSLT largely obsolete. Maintaining aging XSLT libraries (like libxslt in Chromium) is resource-intensive and prone to memory safety vulnerabilities, creating a significant attack surface. This proposal suggests deprecating XSLT from web standards to reduce security risks and optimize resource allocation, with no practical loss of developer functionality.
Development