← Back to context

Comment by sangeeth96

8 hours ago

To those who saw a chrome.com link and got triggered:

> The Firefox[^0] and WebKit[^1] projects have also indicated plans to remove XSLT from their browser engines.

[^0]: https://github.com/mozilla/standards-positions/issues/1287#i...

[^1]: https://github.com/whatwg/html/issues/11523#issuecomment-314...

In my opinion this is not “we agree lets remove it”. This is “we agree to explore the idea”.

Google and Freed using this as a go ahead because the Mozilla guy pasted a pollyfill. However it is very clearly NOT an endorsement to remove it, even though bad actors are stating so.

> Our position is that it would be good for the long-term health of the web platform and good for user security to remove XSLT, and we support Chromium's effort to find out if it would be web compatible to remove support1. If it turns out that it's not possible to remove support, then we think browsers should make an effort to improve the fundamental security properties of XSLT even at the cost of performance.

Freed et al also explicitly chose to ignore user feedback for their own decision and not even try to improve XSLT security issues at the cost of performance.

  • Last I heard for WebKit removing it was the only outcome they saw.

    • Yeah all these billion dollar corporations that can’t be bothered see it as the only path forward not because of technological or practical issues, but because none of them can be asked to give a shit and plan it into their budgets.

      They’re MBAs who only know how to destroy and consolidate as trained.

      7 replies →