Tech News
← Back to articles

Removing XSLT for a more secure browser

read original related products more articles

Mason Freed Dominik Röttsches

Chrome intends to deprecate and remove XSLT from the browser. This document details how you can migrate your code before the removal in late-2026.

Chromium has officially deprecated XSLT, including the XSLTProcessor JavaScript API and the XML stylesheet processing instruction. We intend to remove support from version 155 (November 17, 2026). The Firefox and WebKit projects have also indicated plans to remove XSLT from their browser engines. This document provides some history and context, explains how we are removing XSLT to make Chrome safer, and provides a path for migrating before these features are removed from the browser.

Note: To further improve security, we also plan to migrate XML parsing within Chrome from libxml2 to an XML parser written in Rust.

What is being removed?

There are two APIs in the browser that implement XSLT, and both are being removed:

The XSLTProcessor class (for example, new XSLTProcessor() ).

). The XSLT Processing Instruction (for example, ).

Timeline For Chrome

Chrome has the following plan:

... continue reading