Google ha deciso di rimuovere dal motore del browser Chromium i componenti per il supporto del linguaggio di trasformazione dei documenti XML XSLT. Il motivo addotto \u00e8 la volont\u00e0 di ridurre la superficie di attacco attraverso l'abbandono della libreria libxslt. Secondo Google, il supporto per XSLT 1.0 presenta rischi di sicurezza ingiustificati poich\u00e9 nella libreria libxslt vengono di tanto in tanto scoperte vulnerabilit\u00e0 (ad esempio, CVE-2025-7425 e CVE-2022-22834) ed essa ha problemi di manutenzione (da giugno a settembre la libreria \u00e8 rimasta senza supporto e senza correzione delle vulnerabilit\u00e0). Anche i progetti Firefox e WebKit stanno considerando la possibilit\u00e0 di rimuovere il supporto per XSLT. <\/p>\n
Le vulnerabilit\u00e0 in XSLT stanno diventando uno strumento per eseguire attacchi ai browser, considerando che attualmente il supporto client per XSLT \u00e8 poco richiesto e utilizzato raramente. Le operazioni di trasformazione dei dati in HTML possono essere svolte in modo pi\u00f9 sicuro utilizzando API JavaScript, come DOMParser e Fetch. Secondo le statistiche di Google, la percentuale di pagine web caricate che utilizzano XSLT \u00e8 dello 0,02%, mentre quella delle pagine che applicano istruzioni di elaborazione XSLT \u00e8 stimata allo 0,001%. <\/p>\n
\u00c8 stata presa la decisione di interrompere l'uso della libreria libxml2 in Chromium, che presenta regolarmente vulnerabilit\u00e0 e problemi di manutenzione. La libreria libxml2 viene utilizzata in Chromium per l'analisi, la serializzazione e la convalida dei dati in formato XML, mentre la classe XSLTProcessor e le istruzioni di elaborazione XSLT (<?xml-stylesheet … ?>) si basano su libxslt. <\/p>\n
Il supporto per le funzionalit\u00e0 basate su libxslt, come l'API XSLTProcessor e le istruzioni per l'analisi delle tabelle di stile XML, sar\u00e0 interrotto nella release di Chrome 155, prevista per il 17 novembre 2026. Nella versione Chrome 143, pianificata per il 2 dicembre 2025, verr\u00e0 aggiunto un avviso nella console web riguardo alla deprecazione dell'API XSLTProcessor. Nella versione Chrome 148 (primavera 2026), il supporto per XSLT sar\u00e0 disattivato per impostazione predefinita nelle versioni Canary, Dev e Beta. La funzionalit\u00e0 per l'analisi di XML sar\u00e0 mantenuta, ma sar\u00e0 trasferita su una nuova libreria scritta in Rust, tenendo conto della sicurezza. <\/p>\n
Come sostituzione del supporto XSLT integrato nel browser, si propone di spostare l'elaborazione XSLT sul lato server<\/a> e inviare ai clienti contenuti HTML gi\u00e0 formati. I gestori che utilizzano l'API XML per l'interazione tra client e server<\/a>, si propone di sostituire l'uso del formato JSON e il rendering tramite la conversione di JSON in HTML\/CSS utilizzando JavaScript. Tra le possibili alternative viene inoltre segnalato l'uso di librerie JavaScript Saxonica con implementazione di XSLT, uno strato polyfill per garantire la compatibilit\u00e0 con il vecchio codice, che offre una sostituzione di XSLTProcessor basata su WASM, e un'estensione del browser che inserisce automaticamente lo strato polyfill nei documenti XML. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0433\u043e \u0434\u0432\u0438\u0436\u043a\u0430 Chromium \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 XSLT. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libxslt. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Google \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 XSLT 1.0 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043d\u0435\u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libxslt \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u044f\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2025-7425 \u0438 CVE-2022-22834) \u0438 \u043e\u043d\u0430 \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-147510","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Chromium \u00e8 stata presa la decisione di rimuovere il supporto per XSLT e smettere di utilizzare libxslt e libxml2 | ProHoster","description":"L'azienda Google ha deciso di rimuovere dal motore del browser Chromium i componenti per il supporto del linguaggio di trasformazione dei documenti XML XSLT. Come motivo viene citato il desiderio di ridurre la superficie d'attacco attraverso l'interruzione dell'uso della libreria libxslt. Secondo Google, il supporto per XSLT 1.0 presenta rischi di sicurezza ingiustificati poich\u00e9 nella libreria libxslt vengono periodicamente individuate vulnerabilit\u00e0 (ad esempio, CVE-2025-7425 e CVE-2022-22834) e presenta problemi.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-chromium-resheno-udalit-podderzhku-xslt-i-prekratit-ispolzovanie-libxslt-i-libxml2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chromium \u0440\u0435\u0448\u0435\u043d\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 XSLT \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 libxslt \u0438 libxml2 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0433\u043e \u0434\u0432\u0438\u0436\u043a\u0430 Chromium \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 XSLT. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libxslt. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Google \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 XSLT 1.0 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043d\u0435\u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libxslt \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u044f\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2025-7425 \u0438 CVE-2022-22834) \u0438 \u043e\u043d\u0430 \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-chromium-resheno-udalit-podderzhku-xslt-i-prekratit-ispolzovanie-libxslt-i-libxml2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-06T15:11:55+00:00","article:modified_time":"2025-11-06T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"147510","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:48:19","updated":"2026-02-22 15:54:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/147510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=147510"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/147510\/revisions"}],"predecessor-version":[{"id":162512,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/147510\/revisions\/162512"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=147510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=147510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=147510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"