- From: sideshowbarker <notifications@github.com>
- Date: Mon, 24 Aug 2026 15:04:52 -0700
- To: whatwg/dom <dom@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 24 August 2026 22:04:56 UTC
@sideshowbarker commented on this pull request.
> @@ -11449,6 +11449,11 @@ methods on {{Document}}.
<h2 id=xslt>XSLT</h2>
+<p class="critical">Avoid using XSLT. The browser implementations of XSLT are highly susceptible
```suggestion
<p class="critical">Avoid using XSLT in frontend JavaScript running in browsers. The browser implementations of XSLT are highly susceptible
```
…or some other language to qualify that admonition. Otherwise, without qualifying that in some way, it could be misread as us admonishing people to avoid using XSLT _everywhere_ — including all the other off-web places outside browsers where people use it. (And given previous reactions we’ve experienced in this area, we can pretty much be guaranteed some folks are gonna misread it that way.)
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/dom/pull/1499#pullrequestreview-5012988932
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/dom/pull/1499/review/5012988932@github.com>
Received on Monday, 24 August 2026 22:04:56 UTC