Re: [whatwg/dom] Mark XSLT deprecated (PR #1499)

@mfreed7 commented on this pull request.



> @@ -11449,6 +11449,12 @@ methods on {{Document}}.
 
 <h2 id=xslt>XSLT</h2>
 
+<p class="critical">Avoid using XSLT. Its implementation in engines has fallen decades behind

Here's a proposed replacement (thanks @zcorpan). @annevk let me know what you think:

```
<p class="critical">Avoid using XSLT. The browser implementations of XSLT are highly susceptible
to memory safety vulnerabilities, and the web platform has evolved toward JavaScript as the safe
replacement. For these reasons, this feature is in the process of being removed from the web
platform. (This is a long process that takes many years.)</p>
```

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/dom/pull/1499#discussion_r3847592274
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/dom/pull/1499/review/5012687386@github.com>

Received on Monday, 24 August 2026 21:24:44 UTC