Microsoft has issued an urgent notification to organizations regarding potential service disruptions for Windows Server Remote Desktop Web Access. The issue stems from the upcoming removal of client-side XSLT support in Chromium-based browsers, scheduled for mid-November 2026.
Google cited two primary reasons for deprecating XSLT: low usage, accounting for approximately 0.02% of web traffic, and security risks associated with the legacy libxslt C/C++ codebase, which is prone to memory safety vulnerabilities.
To mitigate the impact, Microsoft released the KB5130993 update. Administrators can temporarily restore XSLT functionality by setting the XSLTEnabled value to 1 in the registry or via browser policy for Microsoft Edge and Chrome.
Alternative solutions include transitioning to the HTML5 Web client, which allows users to launch remote desktop sessions directly or download RDP files. Users can also enable IE mode in Microsoft Edge and add the RD Web address to the allowed list to maintain access.
