WhatWG: Proposal – Update XPath to at least v2.0
&gt; The XML parts of our pipeline are in maintenance mode and we would love to eventually deprecate and remove them, or at least replace them with something that generates less security bugs. Increasing the capabilities of XML in the browser runs counter to that goal.<p>Bit of a weird comment from Chrome. &#x27;XML&#x27; doesn&#x27;t generate &#x27;security bugs&#x27; - sloppy development practices do.  If they want to generate less security bugs they should be more aggressive with their testing&#x2F;fuzzing in the parts of code that deal with XML.