Google is removing XSLT (Extensible Stylesheet Language Transformations) from Chrome for security reasons. This affects HCL Connections features that use XSLT in the browser to display content, including several widgets. Starting with Chrome 158, scheduled for release on November 17, 2026, XSLT no longer works in Chrome unless an administrator has enabled the enterprise policy described below. Other Chromium-based browsers, such as Microsoft Edge, are expected to follow, with Edge planned for December 2026. Firefox and Safari have also said they intend to remove XSLT, but neither has published a timeline yet.
Two browser features are affected:
- The JavaScript
XSLTProcessorAPI, which web applications use to transform XML into HTML in the browser. - XSLT processing instructions in XML documents (
<?xml-stylesheet type="text/xsl" ...?>).
XML itself is not being removed, and neither is CSS styling of XML (type="text/css"). Other Chromium-based browsers, such as Microsoft Edge, are expected to follow. Firefox and Safari have also stated their intentions to remove XSLT, but neither has published a timeline yet.
Take a look at the KB entry of HCL how to establish the workaround for this issue.
