- From: Mason Freed <notifications@github.com>
- Date: Mon, 24 Aug 2026 14:24:40 -0700
- To: whatwg/dom <dom@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 24 August 2026 21:24:44 UTC
@mfreed7 commented on this pull request.
> @@ -11449,6 +11449,12 @@ methods on {{Document}}.
<h2 id=xslt>XSLT</h2>
+<p class="critical">Avoid using XSLT. Its implementation in engines has fallen decades behind
Here's a proposed replacement (thanks @zcorpan). @annevk let me know what you think:
```
<p class="critical">Avoid using XSLT. The browser implementations of XSLT are highly susceptible
to memory safety vulnerabilities, and the web platform has evolved toward JavaScript as the safe
replacement. For these reasons, this feature is in the process of being removed from the web
platform. (This is a long process that takes many years.)</p>
```
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/dom/pull/1499#discussion_r3847592274
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/dom/pull/1499/review/5012687386@github.com>
Received on Monday, 24 August 2026 21:24:44 UTC