in my “why are y’all rewriting everything in Rust while critical infrastructure goes unmaintained” era

@Lady It actually has a surprisingly small set of rdepends within Ubuntu. Some important packages, like Postgres, but mostly desktop software besides Postgres, Icecast, and Asterisk, and it's hard to say the latter have all too many users. There's Ruby's Nokogiri, but given the near-weekly security updates to that, I might almost prefer someone Rewrite it in Rust (or literally anything).

@aschmitz pretty sure all web browsers depend on either it directly or a fork of it (statically linked, probably, and i’m not sure how exactly the code is joined together)

if not, i’d be interested in finding out whatever they ARE using

@Lady WebKit uses libxslt, at least it did when I packaged it.

Firefox has its own custom HTML 5 parser, originally developed around 2009 and somewhat based off the HTML 5 standard parsing algorithm and a Java reference implementation, unimaginatively just called "parser". It does vendor a copy of Expat for pure XML.

See also:
johnresig.com/blog/html-5-pars
hacks.mozilla.org/2010/05/fire
hg-edge.mozilla.org/mozilla-ce

@awilfox @Lady WebKit developer here! Libxml and libxslt are used for... Well, XML and XSLT support (mainly the latter). The main HTML/XHTML parser is custom and heavily tested (and fuzzed) like the rest of WebKit. For those truly concerned about bugs in those libraries, both @WebKitGTK and @WPEWebKit may be built without them but losing a bit of (somewhat niche) functionality.

Follow

@aperezdc @awilfox yes, i’m not really worried about the security of webkit—but i AM a bit concerned that browsers (mainly chrome) will use it as an excuse to drop xpath or xslt support (which i do actually make use of)

Sign in to participate in the conversation
📟🐱 GlitchCat

A small, community‐oriented Mastodon‐compatible Fediverse (GlitchSoc) instance managed as a joint venture between the cat and KIBI families.