Comment by compiler-devel

That is a good reason. Is XSLT known for security problems the same way that CGI was?