Comment by dev0001

3 months ago

The vulnerabilities associated with native client-side XSLT are not in the language itself (XSLT 1.0) but instead are caused by bugs in the browser implementations.

Ps. The XSLT language is actively maintained and is used in many applications and contexts outside of the browser.