Chrome and Edge are removing XSLT: what breaks and what does not

112 pointsposted 14 hours ago
by croes

133 Comments

cousin_it

13 hours ago

When I first learned that XSLT was going away, I got curious how to achieve the same thing in JS (client-side templating that happens during page load, without any "flash of content"). It turns out there's a very nice way to do it, by using inline scripts that append elements next to document.currentScript. Lean Rada wrote about it here: https://leanrada.com/notes/inline-rendering-currentscript/ and I wrote about it as well: https://vladimirslepnev.me/write

dfabulich

6 hours ago

You can also style XML documents with CSS, like this:

    <link rel="stylesheet"
       href="style.css"
       xmlns="http://www.w3.org/1999/xhtml" />

WCSTombs

13 hours ago

That Lean Rada article is really fun!

russellbeattie

10 hours ago

Instead of:

    <script>document.currentScript.replaceWith(new Date().getFullYear())</script>
How about:

    <svg onload="this.outerHTML=new Date().getFullYear()"/>
Not as pretty, and you'd have to escape all the quotes, but still pretty usable.

panzi

7 hours ago

Hm, does document.write("...") still exist?

esprehn

10 hours ago

That won't work with trusted types enabled.

russellbeattie

8 hours ago

Well this works too:

    <svg onload="this.replaceWith(new Date().getFullYear())"/>

Telaneo

8 hours ago

At least Firefox will still have it, although with Mozilla being the way that it is, I wouldn't be surprised if they follow suit.

I feel the same way about this that I do about removing Flash support: it's good that we're moving on to better things, but that doesn't help if there aren't better things to move on to.

What's the simple goto for making web based games that kids can mess around with? It was Flash, and now it's nothing. How do you set up an RSS feed to not just blast raw XML at the user? Soon it won't be XSLT any more, but I don't see a good replacement (even more annoying is the fact that browsers used to have features to handle RSS feeds by themselves, and XSLT was used to sidestep that problem, but now there's no more side to step).

Fnoord

16 minutes ago

Why does it have to be web-based? Discoverability? There's Minecraft and Lego. I discovered the CLI of MSDOS when I was a kid. It was a world to explore for sure.

There used to be pictionary online, web-based, which used Shockwave. iSketch I think it was called. There's probably alternatives these days, but I wouldn't know them. And regarding the Roblox issue: yes, some **heads were drawing ** pictures. Screw those people. This is what you get when you interact with total strangers. It brings the worst in people. How to solve that? Play with strangers-lite. Play games with people who are local to you. Yes, issues may ensue, but at the very least you can contact each other as parents.

BSTRhino

7 hours ago

I've been making Easel (https://easel.games) for four years so far! A place for teenagers to make multiplayer web games and share them with each other. Still a long way to go but this is the goal!

choo-t

3 hours ago

> What's the simple goto for making web based games that kids can mess around with? It was Flash, and now it's nothing.

Pico-8, Picotron, Tic-80, GameMaker, Godot all have simple web exporter.

cowlevel

4 hours ago

Realistically, right now, it's Roblox.

Which is also a pedophile safe-haven (as proven by Chris Hansen and associates) so I wouldn't let my kids use it.

jeroenhd

8 hours ago

>What's the simple goto for making web based games that kids can mess around with?

Web games? Is that like Roblox on your school chromebook?

I think Roblox is the game design space for kids these days (though I would recommend parents to protect their kids from that game until they actually stop the paedophiles).

If you do want to target the browser, the sky is the limit. WASM has made any desktop game design platform compatible with browsers. Thanks to Ruffle, you can build flash games and they will even work on your iPhone, despite Steve Jobs' personal vendetta against Adobe's CEO.

RSS can have CSS stylesheets if you intentionally break the content type, so you can try your hand at making RSS feeds pretty. However, realistically, the kids aren't using RSS anymore. Browsers don't really support them, clients are run by stubborn people like me refusing to give up on what could have been, and RSS sources are dying out one by one.

Trustable8

13 hours ago

Shame back in the XHTML days XSLT was a spec that could have made website modularity so much cleaner. I once created an early website creation tool that merged separate components using XSLT it was really powerful in the days before javascript was usable without jQuery. However XHTML was dropped in favor of HTML5 and XSLT was pretty much useless after that. Its done well to survive this long I presume it was mainly kept to style XML files.

wahern

13 hours ago

HTML5 could have taken the extra step of defining a canonical XML or XML-compatible DOM encoding, or at least encouraged it. But the anti-XML sentiment was explicit and spiteful. Still, popular XSLT processors are built to consume and even produce HTML5, I'm just not sure how thorough those capabilities are or whether they're based on any formal or informal standards. (Maybe the W3C has/had something like that, as part of it's attempts to rollup HTML5 snapshots into versioned standards?)

I lost any enthusiasm for XML after my experience with WDDX and XML-RPC, but as a foundation for HTML it was the best thing going. And maybe still is, given the absence of cross-toolchain contenders? Ditto for XSLT, at least if disregarding the choice to make the syntax homoiconic. In fact I circled back to XSLT long after it was clear it was a dead end. A good tool is a good tool, and the fact it remains so despite the wanton neglect only proves it.

jxramos

13 hours ago

I'm curious, what exactly in the DOM is not XML-compatible?

jraph

5 hours ago

One thing I can think of is tag names being upper case in HTML and lower case in XHTML in the DOM.

degamad

12 hours ago

From long-lost memory, I think it's implicitly closed tags (e.g. img).

thayne

6 hours ago

That is one, but not the only thing. Non-xml html is just generally more forgiving.

If you make a mistake and use incorrect syntax in html, the browser will do its best to recover. In xhtml, it would just completely fail. Which approach is better is debatable.

jdiff

12 hours ago

XML can handle implicitly closed tags, they call them "empty" in the spec here:

https://www.w3.org/TR/xml/#sec-starttags

plorkyeran

10 hours ago

Empty tags in XML are not implicitly closed. They require the explicit /.

conartist6

10 hours ago

XML can handle <img /> but not <img> followed by tagsoup (like HTML handles).

masklinn

13 hours ago

> HTML5 could have taken the extra step of defining a canonical XML or XML-compatible DOM encoding, or at least encouraged it.

Yeah and then we could have called it xhtml5. Too bad that does not exist. Oh wait https://html.spec.whatwg.org/multipage/xhtml.html

> But the anti-XML sentiment was explicit and spiteful.

No, xhtml was just a bad idea creating tons of problems and solving none.

kllrnohj

13 hours ago

> xhtml was just a bad idea creating tons of problems and solving none.

Well an XHTML parser (and serializer) is a lot simpler, which is a pretty meaningful problem to solve.

What problems does xhtml create?

cowlevel

4 hours ago

All the problems of XML, such as the billion laughs attack, and reading local files as DTDs. It should have been XML-compatible strict parsing without pulling in all of XML's complexity that only hackers ever use.

bazoom42

12 hours ago

> Well an XHTML parser (and serializer) is a lot simpler

Perhaps, but a combined html and xhtml parser is more complex than just a html parser. Since html already is entrenched, xhtml would be in addition to html, not instead of.

whizzter

8 hours ago

XML/XHTML is a fairly strict language syntax wise compared to HTML, tags are either explicitly self-closing i.e. <img/> or terminated with a matching closing-tag, no exceptions.

HTML has special rules depending on the tag's type, ie a bunch of them are just written (<img>) and the parser doesn't even really want to see a matching closing tag, or tags like <script> that has a special mode that stops being a HTML parser up until </script> is found. (1)

A HTML parser can become a XML parser by disabling a bunch of special-features and supporting self-closing tags (depending on XML level).

A XML parser needs a ton of "hacks" to become a HTML parser.

Also browsers needs an XML parser anyhow to support svg that's an xml-based format, also the DOM spec is written to support namespaces's like XML.

XSLT did complicate things, and most importantly it seems many relied on that one old implementation written in the 90s that was a swiss-cheese when it came to security concerns that nobody wanted to spend money on maintaining.

(1): https://html.spec.whatwg.org/multipage/parsing.html#script-d...

bazoom42

3 hours ago

> A HTML parser can become a XML parser by disabling a bunch of special-features

Even if this was true it would still increase complexity to have two parsing modes compared to just a html parser.

crote

17 minutes ago

The idea would be to eventually deprecate "legacy" html, of course.

Whether that kind of backwards-incompatible breakage would ever become acceptable is a completely different story. But we ditched Flash, ActiveX, Silverlight, and Java applets, so who knows what could have been!

smallerize

13 hours ago

The main one is that even a slightly broken XHTML document will fail to render. HTML is much more forgiving.

JoshTriplett

13 hours ago

With the benefit of hindsight, if the web had been that way from the beginning, I think we would have been better off. The moment you tested your content in any browser, you'd immediately see if it was broken.

But it wasn't something that could get introduced later, after all the broken content that already existed.

ktpsns

12 hours ago

With all respect - the opposite is true. The web succeeded because HTML and HTTP are easy standards easily writable by humans with text editors. HTML was writable by non-programmers.

bazoom42

3 hours ago

The low barrier to authoring was very important. No tools needed except notepad and a browser. Syntax easy to understand and write by hand.

But I don’t think the ambiguous html parsing made it easier. If anything it made it more difficult since you had to test in multiple browsers. Eg a table which was not properly closed would render in IE but not render in Netscape.

JoshTriplett

12 hours ago

I don't think "parsed strictly" makes something hard; on the contrary, I think it's helpful to make something easy. Clear feedback, easy to test.

But then, I've always preferred strongly typed over stringly typed.

joshuamorton

12 hours ago

This imagines HTML as code and not markup.

The reason HTML and markdown are more widely adopted than latex is because the former are more forgiving.

bazoom42

15 minutes ago

The reason HTML is more widely used than latex is obviously because browsers support it natively.

JoshTriplett

12 hours ago

I am thinking of it as markup. I stand by the point: I think "forgiving" is not a feature in parsing; it's a bug.

simonra

11 hours ago

Forgiving is very helpful in enticing those whose content you'd like to parse to start producing content. There's no use in having the worlds greatest pipeline if nothing is being put in and moved through. See the tragedy of the death of flash and "surely someone will come along and make a great frictionless editor for canvas and webgl", only for all the creative energy ending up being sucked up and monetised by roblox, leaving the world worse off.

dwaite

9 hours ago

Until html5 it wasn't forgiving - it was ambiguous. Different browsers could (and did) interpret different malformed html in different ways.

Once there was a standardized interpretation for malformed html, there was a chance that we could have treated that as a transparent conversion layer to xhtml. That isn't how WHATWG went, however.

genxy

10 hours ago

I see what you are saying, but I don't think catering to sloppy growth over correctness needs to happen at the document level. The unrigorous shouldn't be given access at this level, you can still make php and myspace at other layers and using other abstractions. I think sloppy growth has its place, but it also needs the right level.

JoshTriplett

7 hours ago

Flash dying is a great victory for Open Source browsers. I don't miss a thing about that world; as an authoring tool, it was hugely overused, for things it should never have been used for, like literally anything other than games.

leoc

12 hours ago

That's not obviously so. The adoption of JS wasn't particularly hindered by the fact that users have to match their brackets and generally avoid syntax errors.

Conan_Kudo

12 hours ago

Yeah, I think SGML HTML as the first pass was a mistake. All my early websites were XHTML until people called them "bad"...

bazoom42

an hour ago

> XHTML was dropped in favor of HTML5 and XSLT was pretty much useless after that

Client-side XSLT was always pretty useless, but I dont see what HTML5 has to do with it?

The only real use case for client-side XSLT was for styling/layout back before CSS became widely supported. Improvements in CSS support made XSLT unnecessary.

johnny22

13 hours ago

i think xhtml happened before the wider world of web devs were ready for it. Component based architectures took longer to be adopted than I certainly expected.

It might actually work if reintroduced these days as long as we can consider many components to be valid documents.

bazoom42

13 hours ago

There is nothing component-based about xhtml compared to html. It is just html with xml syntax.

com2kid

8 hours ago

It was reintroduced, in the form of jsx.

Sure there is some embedded JS in there as well but ignore that and JSX is thr XHTML comeback story.

mook

6 hours ago

And jsx was kind of weird because e4x existed (and was never widespread, and implementations of it went away).

I suppose the important part was that jsx needed to be compiled, which means it couldn't introduce any new security issues…

g-b-r

13 hours ago

The XSLT 1.0 spec specifically was written pretty badly, though, to my recollection; I had a hard time at making sense of it

WCSTombs

13 hours ago

Yeah, XSLT 1.0 has some really obvious missteps, so much so that to my knowledge basically nobody just implements XSLT 1.0. What they actually support is (most of) XSLT 1.0 plus a handful of EXSLT extensions (which are completely unofficial and not part of any XSLT spec, by the way). In my opinion the EXSLT stuff is the bare minimum needed to make XSLT 1.0 at least a passable language. Meanwhile, the XSLT spec evolved into 2.0 and 3.0, which as far as I'm aware, even to this day, has no complete open-source implementation.

lofaszvanitt

13 hours ago

And the rendering was very slow back at the day.

mcculley

12 hours ago

I am still using XSLT. I have been using it for 26 years. I generate XML documents on the backend and turn them into HTML for various reports. XSLT has a lot of features and power that newer templating languages lack.

Are any of these newer templating languages worth me switching?

bazoom42

an hour ago

XSLT is not going away, it is only in-browser XSLT which is removed. If you are happy with XSLT there is no need to abandon it. Just perform the transformation on the backend.

jeroenhd

8 hours ago

Semi-serious suggestion: wrap the files in an (X)HTML page that links to a Javascript file loading a full XML parser compiled to WebAssembly, which then does the full transformation live, in-browser. You wouldn't need to change your templates or your generation logic much if you structure the surrounding skeleton right!

Of course, you'd need to get over the lunacy of loading a full DOM transformation library into the browser DOM.

WJW

12 hours ago

Yes, because XSLT won't work in Chrome and Edge anymore.

Klonoar

12 hours ago

Their comment isn’t clear if they’re doing the transform on the server before piping it down as HTML, which some implementations have done over the years as it provided access to newer XSLT features that browsers stagnated on.

miohtama

12 hours ago

You can still run JS or WebAssembly based XSLT transformer

genxy

10 hours ago

This is what the browser vendors should have done, with links to the wasm modules for doing the transforming. It would have been better this way.

bazoom42

10 minutes ago

The cool thing with a wasm-based xslt implementation is there is no need for the browser vendors to gate-keep it. Just use the implementation you prefer.

sippingabonedry

12 hours ago

A great way to convince you you've always been wrong:

Step 1: Gain browser monopoly

Step 2: Generate fake security scare

Step 3: Gaslight everyone that only way to mitigate is to get rid of it completely like Flash.

Step 3a (corollary): There isn't anyone available that can fix the bugs because we spent all resources on UI/UX experimentation

post-it

12 hours ago

Thank you for reminding me that we don't have Flash anymore. I'm counting blessings I forgot I had.

sippingabonedry

11 hours ago

Flash went away because Steve Jobs made an impassioned plea to find a better way and follow their humble browser which only had single digit percentages of marketshare at the time.

dwaite

9 hours ago

Even for enthusiastic Android vendors who saw it as a differentiating feature from iPhone, Flash still took three years from the iPhone launch to have its first release. Adobe was really in poor shape to port Flash to a new platform. Waiting for them as a vendor to bump their proprietary platform vs integrating support for the features into the browser would have cost years for mobile adoption.

doublerabbit

9 hours ago

> Adobe was really in poor shape to port Flash to a new platform

I wouldn't say poor. Adobe had its own creative-software empire to up-keep. Photoshop, Illustrator, After Effects, and its web-authoring products gave it enormous influence over creative professionals. Macromedia's Dreamweaver and Flash were serious competitors in web design and interactive media. Adobe needed the missing monopoly cards; Flash, Fireworks and Dreamweaver were them.

Flash was security ridden yes, Flash required a plugin, yes; I don't think supported AppleOS at the time. These could of all been solved but I would agree that to refactor the software would of been an expensive take.

Jobs + HTML5, WebGL, JS all had entered the ring and finished the blow.

I miss it. Growing up with the internet in 2003, 2010's was the end of the wild world web. 2020's was the era of walled gardens for which we now have LLM's for the theme park and we're now entering 2030 where the internet is on fire with creativity now wrung between Yes Ai and No Ai.

    Domain name:
        lordsephiroth.co.uk

    Relevant dates:
        Registered on: 18-Nov-2003
My first ever domain name, registered with my pocket money at the age of 13. Hopefully 2040 should bring world peace. One would hope.

MiroslavPokorny

7 hours ago

I always thought Flash was hated by Apple, because of the CPU burn which costs battery time.

lmz

6 hours ago

It's not like it was great on Android either.

prmoustache

2 hours ago

Flash was bad on every platform. If it wasn't vattery, it was accessibility, if it wasn't accessibility it was security.

The only good thing about flash were the authoring tool but it only appealed to content (games, websites) producers, never the users.

fnord77

9 hours ago

2040: Butlerian Jihad

reaperducer

8 hours ago

Flash went away because Steve Jobs made an impassioned plea to find a better way and follow their humble browser which only had single digit percentages of marketshare at the time.

You're half right.

Yes, Jobs killed Flash. But he did it because Flash on mobile was a battery killer. And when the original iPhone came out (one of which I still have), battery technology wasn't as advanced as it is now.

Before I got my wife's hand-me-down iPhone, I had one of the few mobile phones that supported Flash. On the few occasions when I used the web browser, I lived in fear that I'd land on a web site that was using Flash because I knew it would tear through the phone's battery in less than 10 minutes.

Ever notice that the people on HN who pine for the good-ol'-days of Flash only remember games? Never the Flash ads and intrusive videos.

Jobs did the future a favor.

himata4113

10 hours ago

html5 canvas and javascript advancements made flash obsolete, reminder that you used to be able to run java in the browser!

whizzter

8 hours ago

Yes and no, canvas was fine for replacing flash, and JS performance was good enough quickly.

Audio however was a crapshoot for years, especially for games.

Even basic WebAudio took until 2015, and the final piece to match Flash being AudioWorklet was only first available in 2018(Chrome) and took until April _2021_ land in Safari.

So before 2021 you needed to either write your own abstractions to support multiple API's with different execution models with so-so capabilties to be somewhat on-par with what Flash provided or even for years resort to simpler solutions (ie just samples).

himata4113

8 hours ago

That's unfortunate that audio got neglected, never knew that.

cowlevel

4 hours ago

Nobody uses XSLT and nobody maintains XSLT. You're free to support it in your own browser but it's not reasonable to expect Mozilla to support XSLT any more than it supports VRML.

creatonez

9 hours ago

I find it baffling that anyone still cares. RSS nerds like RSS because it can be consumed by software that displays it however the user wants. XSLT pages just function as normal webpages, there is no consuming it programatically because XSLT is the view language. The underlying XML/RSS is what you wanted, not the hodgepodged together crap on top of it.

lacoolj

7 hours ago

Anyone else getting a 403 trying to open the page? Like...after cloudflare confirmed humanity n stuff

cosmic_cheese

11 hours ago

Feels crazy to me that to date, this was the only widely supported way to pull in shared bits of HTML like headers, navigation, and footers without anything dynamic on either end. It’s such a basic and common use case to be so poorly covered.

lmz

6 hours ago

> this was the only widely supported way to pull in shared bits of HTML like headers, navigation, and footers without anything dynamic on either end

Framesets. Not great UI though.

yokoprime

13 hours ago

i just got flashbacks to a past life where i handcrafted XSLT to pre-render output from a service as HTML server side. Of course the front end was running some asp.net version and Microsoft flavored XSLT had lots of quirks.

spudlyo

10 hours ago

I encode all the text, localization, provenance, pedagogical, and forced alignment data for my Latin language audiobook chapters[0] as TEI-XML. When I fetch a document out BaseX, I have an XQM module that wraps the document in a number of XML processing instructions (PIs), one being a pointer to the reader XSLT 1.0 stylesheet which does all the HTML rendering client-side.

It's a cool system, and I'll be bummed when I have to do this on the server. I already get warnings in the Firefox console about them soon deprecating XSLT support, so it's not just Chrome.

[0]: https://fabulae.orbilii.com

genxy

10 hours ago

I'd consider getting your workflow running in wasm (in wasmtime on the server) and then you can migrate the same workflow to the client using the same wasm module. Nearly all LLVM based compilers can compile to wasm (WebAssembly).

froh

4 hours ago

there was a wonderful wisiwyg xml editor that rendered the FO life from your xml using your xslt. syntext serna. they even open sources it in their hopes it would see some pick up.

alas that whole xml bubble moved into a business cloud, driven up there by complexity.

I think the biggest mistake of the consortia was to move from dsssl, the lisp, to xslt in unmaintainably arcane xml syntax, for a programming language that is.

does anyone here have some insight on why they went from dsssl to xslt? "because we can"?

jshier

11 hours ago

More than ten years ago a coworker wrote a tool to generate Swift from iOS storyboards, to pass data through segues and give us typed access to identifiers. First version of it used XSLT to transform the storyboard XML. A powerful, if niche technology.

goodridance

12 hours ago

Good riddance. XSLT and EJB marked the dark ages of software development. For a half decade nothing made sense and programmers and management were going along with the charade until everyone collectively realized it was complete garbage and just stopped using it. I remember replacing an XSLT/EJB system that processed one order per minute with a C++ system written in a week that processed 10,000/minute. A team of a dozen programmers had been working on that XSLT disaster for years.

staminade

10 hours ago

In retrospect I really think it was a deliberate plan by IBM and Sun to turn software development into such an awful, impenetrable quagmire that they would be the only ones who could build and maintain any system.

compiler-devel

13 hours ago

In the age of LLMs I would expect that legacy code bet carried indefinitely. The LLMs will have it indefinitely in their training data, and with code "cheap" to produce now, what are the good reasons for dropping legacy code?

anonymous908213

13 hours ago

The obvious answer is that LLMs are not quite the machine gods they're marketed as, innit.

compiler-devel

12 hours ago

I don't understand what you're saying.

anonymous908213

12 hours ago

Your presumption is that code is "cheap" because of LLMs. I am challenging the premise. Maintaining code in production for a product used by billions of people is not cheap, with or without LLMs. Perhaps your shitty disposable code that you write for yourself and never subject anyone else to is cheap, but if your code is in a large, complex codebase and has to actually work for everyone who uses it, not so much.

compiler-devel

12 hours ago

LLMs are only getting better and more competent, especially for code well-covered by tests. On such codebases it's definitely cheaper to maintain code with a LLM than by humans alone. I presume then that the XSLT implementation in Chrome is not well-tested.

bazoom42

12 hours ago

> what are the good reasons for dropping legacy code?

Reducing attack surface.

compiler-devel

12 hours ago

That is a good reason. Is XSLT known for security problems the same way that CGI was?

jeroenhd

8 hours ago

Browsers have been relying on libxml2 for ages. Nobody bothered to help libxml2 much, let alone pay for maintenance, but treated it like a security critical component so let their CVE teams loose on unsuspecting volunteers. libxml2 burned out, the project got abandoned, and now Google and everyone else are sweating about what to do with their XML parsing code.

Ripping out the least common and most dangerous parts of XML parsing makes a lot of sense if you want to keep using the unmaintained library without actually having to put in the work to maintain it.

The libxml2 maintainer forked the repo and released it as AGPL, a license which does to Google what garlic does to vampires, unless you pay up.

bazoom42

an hour ago

It is not because of specific known vulnerabilities. It is because it is old legacy unmaintained code which is rarely used and which has a large attack surface.

throw16180339

10 hours ago

XSLT is rarely used, a significant attack surface, and the upstream libraries are riddled with vulnerabilities. LLMs make the problem worse by lowering the cost of finding new vulnerabilities.

croes

8 hours ago

> LLMs make the problem worse by lowering the cost of finding new vulnerabilities.

LLMs make the problem easier because lowering the cost of fixing the vulnerabilities

est

8 hours ago

Web standards is a lie. Browser vendors just take down stuff because they don't bother.

_ache_

9 hours ago

Anyone getting 403 Forbidden?

I can't load this page.

icantevenhold

9 hours ago

Yea me too, not sure if hug of death or geo block

em-bee

10 hours ago

XSLT RIP(https://xslt.rip/) 698 points|edent|11 months ago|464 comments https://news.ycombinator.com/item?id=45873434

Removing XSLT for a more secure browser(https://developer.chrome.com/docs/web-platform/deprecating-x...) 183 points|justin-reeves|1 year ago|337 comments https://news.ycombinator.com/item?id=45823059

Intent to Deprecate and Remove XSLT(https://groups.google.com/a/chromium.org/g/blink-dev/c/CxL4g...) 87 points|CharlesW|1 year ago|149 comments https://news.ycombinator.com/item?id=45779261

A look at XSLT 3.0 (2017)(https://www.xml.com/articles/2017/02/14/why-you-should-be-us...) 75 points|protomolecool|1 year ago|45 comments https://news.ycombinator.com/item?id=45026013

Show HN: I Built a XSLT Blog Framework(https://vgr.land/content/posts/20250821.xml) 116 points|vgr-land|1 year ago|68 comments https://news.ycombinator.com/item?id=45006098

Show HN: JavaScript-free (X)HTML Includes(https://github.com/Evidlo/xsl-website) 211 points|Evidlo|1 year ago|114 comments https://news.ycombinator.com/item?id=44988271

Should the web platform adopt XSLT 3.0?(https://github.com/whatwg/html/issues/11578) 133 points|protomolecool|1 year ago|108 comments https://news.ycombinator.com/item?id=44987552

XSLT removal will break multiple government and regulatory sites(https://github.com/whatwg/html/issues/11582) 160 points|colejohnson66|1 year ago|146 comments https://news.ycombinator.com/item?id=44987346

Google did not unilaterally decide to kill XSLT(https://meyerweb.com/eric/thoughts/2025/08/22/no-google-did-...) 103 points|bkardell|1 year ago|128 comments https://news.ycombinator.com/item?id=44987239

"Remove mentions of XSLT from the html spec"(https://github.com/whatwg/html/pull/11563) 388 points|troupo|1 year ago|535 comments https://news.ycombinator.com/item?id=44952185

Should we remove XSLT from the web platform?(https://github.com/whatwg/html/issues/11523) 73 points|edent|1 year ago|96 comments https://news.ycombinator.com/item?id=44909599

XSLT: A Precision Tool for the Future of Structured Transformation(https://www.xml.com/articles/2025/07/19/xslt-precision-tool-...) 58 points|protomolecool|1 year ago|59 comments https://news.ycombinator.com/item?id=44633384

XSLT – Native, zero-config build system for the Web(https://github.com/pacocoursey/xslt) 392 points|_kush|1 year ago|325 comments https://news.ycombinator.com/item?id=44393817

Intent to Unship: XSLT(https://groups.google.com/a/mozilla.org/g/dev-platform/c/ZRy...) 5 points|tambourine_man|2 months ago|1 comments

(this list is incomplete. but we just had a power outage (including getting zapped, so i am submitting this now to not lose it)

jiggawatts

13 hours ago

The breakage that sticks out to me is that IIS in Windows Server outputs some reports as XML+XSLT and these have become nigh unusable for years now.

I ignore every official statement about “support” and simply look at the horse's mouth: Microsoft hasn’t bothered to fix this in IIS, and likely never will.

It’s a dead product, “supported” only in a contractual sense, not a practical one.

(If you called support right now demanding fix for this, they’d tell you that it’s broken by design, have you tried moving to a recurring revenue service offering?)

panzi

7 hours ago

Getting 403 for this.

pjmlp

14 hours ago

Edge is Chrome.

zamadatix

12 hours ago

The article says as much in the opening. It also includes a statement from Microsoft noting they do not intend to carry this forward separately, with a salient comment in one of the Microsoft page citations:

> For functionality and compatibility reasons, Microsoft Edge adopts nearly all of the Chromium project's changes to the web platform. However, Microsoft retains full control of the Microsoft Edge browser and may defer or reject changes.

Removed features don't always follow the same timelines either (and not just because of a lag in syncing to upstream Chromium).

pjmlp

5 hours ago

I know, hence why it makes zero sense to name the fork explicitly on the title.

All downstream Chrome clones will follow papa Google eventually, as they won't keep stuff working on their own, cherry picking upstream.

Devasta

13 hours ago

It is wild to look back at XHTML and see that the W3C were entirely correct about XML. They envisaged a world of schemas, client side templating, custom elements, dynamic forms, the works.

Alas, for laughably bad reasons we had to scrap all that for HTML5, Javascript and CSS; a stack so awful that most devs doing anything on the frontend immediately scramble to React, TypeScript, Tailwind, whatever it takes to avoid the underlying garbage.

A horrid state of affairs that will only get worse as time goes on.

ebiester

13 hours ago

They were wrong about one thing: tooling matters.

The XHTML/XML/XSLT tooling was bad, and XSLT was hard to reason about. That meant that amateurs had no way to learn it, and those amateurs went to school and became the workforce.

The web became a winner because it was easy to get something working. And then Google made it a mission to make great developer tools in everyone's hands for free.

I think in 2026 we could build the tooling around a better experience, but it would require thinking about the developer experience first.

Telemakhos

13 hours ago

You could do some awesome things with XML/XSL. My favorite was RSS feeds or OPML collections of RSS feeds (both flavors of XML) calling an XSL transformation when viewed in a web browser instead of mined by computers for data; same with TEI files, although that was a bit more arcane. The idea was that you'd have one data file for machine use and a way to present that data to humans as a web page.

But, as a stack, the XML/XSL/XPath/etc combination was weak because XSLT was hard to comprehend and never updated. No browser supports XSLT 2 or 3; they froze support with 1. XSLT 2 was 2007, a year before HTML 5 was a thing, yet it never got picked up by browsers. Javascript was just easier to understand than XSLT. Development of XHTML was also glacial, and people wanted new tags, especially for video.

mpyne

12 hours ago

> XSLT 2 was 2007, a year before HTML 5 was a thing, yet it never got picked up by browsers. Javascript was just easier to understand than XSLT.

Turns out that tasks easily done by programming languages are best done by programming languages. Who knew?

JSON allowing frontends and backends to communicate in a way analogous to the "smart endpoints, dumb pipes" model for networking saved the Web. The XML adherents wanted the inverted model, which was always insanely difficult to reason about and led to entirely XML-specific security threats.

WCSTombs

13 hours ago

I can't help but agree, and sometimes I think about the alternate version of the web where XML realized its full potential as the dominant technology. The obvious problem with XML is that the syntax is so verbose and redundant that it's only barely human-writable, but this is 100% a solvable problem.

ajxs

9 hours ago

Is that really accurate? In a world where HTML5 never happened, how would XHTML/XSLT solve the same problems that modern front-end Javascript frameworks do (interactive data-driven websites)? I say this as someone who thinks XSLT is a really useful technology, and doesn't want it to be deprecated.

doublerabbit

8 hours ago

That browser world would of been glorious without HTML5. Where Javascript wasn't in the browser and Tcl was (it was a contender); we would be working with plugin based browsers rather than built-in to the hood. That in turn would enable you to process incoming documents based in XSLT however you desired.

It would of been glorious having any programming language usable within the browser. Craft your own features rather than what's given to you now. It's only now that we're gaining the ability to use other languages via WASM.

Tcl was a contender to Javascript in the browser but Javascript won because it didn't require a plugin. And as Tcl never became the browser's default scripting environment juxtaposition Flash eventually lost because the browser platform evolved to make its proprietary plug-in unnecessary

ajxs

7 hours ago

> ...we would be working with plugin based browsers rather than built-in to the hood...

How is that different from sites using Java applets, which were pretty much universally loathed when we had them?

> ...Tcl...

How is Tcl better than Javascript?

> ...Flash...

I'm not sure I really understand what point you're making here. Are you saying that the native browser APIs evolving to make Flash obsolete is a bad thing? If I'm reading you correctly you're saying that websites being free to use their own proprietary plugins is somehow better than HTML5/Javascript?

doublerabbit

7 hours ago

You can't claim the JavaScript technologies of now and apply them to Tcl of the 90's. Tcl is an ace language and well suited for the web.

What shows is that the old stigma of programming held everything back and most of that was Oracle. Still the same today with Google, Facebook and so.

Java Applets were phenomenal and way ahead of their time. It just got caught up in the swamp and broadband wasn't available to enable the technology to flourish. I never loathed them, I loved them. 3D graphics in the browser; we still struggle with that today.

Everything back then was a pain but is anything easier now? Tried using Windows 11? Even Linux has lost its charm.

WebGL isn't mature enough and Apple is cutting OpenGL from their OS. Where is the HTML5 equivalent of Flash? I have yet to see it other than Ruffle.

If the plugins were adopted, and browsers were adaptable to the plugins that would decuffed the browser rather than the current trend of the internet where the schematics are now vastly dominated and ruled by Google & co cuffing the browser and any other future browser for that matter in to nose dive spiral.

Firefox is the only major alternative and is only floundering because of Google.

If plugins were the browser from the get-go then any shift of plugins could rock the boat.

> Are you saying that the native browser APIs evolving to make Flash obsolete is a bad thing?

Pretty much yes. HTML 5 was Googles push for dominance, JavaScript was too. Not sure if intentionally but they sure at it now. "Don't be evil" I seem to recall.

Without it's merits, it would too have it's own problems but I would wager that the internet ecosystem would be broader and more united than what it is now.

Extensions don't count as it's difficult to use another programming language in the browser unless it's tied to WASM or built in. And even then you're further restricted where features are torn out.

Adblockering in chrome et cetera. 1999.

mschuster91

2 hours ago

XSLT however has an absurdly steep learning curve, on top of it (like XML) being utterly verbose. There is a reason neither technology ever caught on outside of big enterprise or government projects.

r_lee

13 hours ago

yet people will say that HTML5 is all you need or something

tossit444

14 hours ago

503

Insimwytim

14 hours ago

So, this site breaks, we know that much

Barbing

14 hours ago

doctor-seo dot net has failed us. What is this world coming to?

krylonmae

13 hours ago

Looks like the site broke