What to do about Xalan?

[Russ Allbery]

Ferenc Wágner <wferi at niif.hu> writes:

> Thanks for providing such a detailed report on the issue.  As far as I
> remember, Xalan support was added to xml-security-c just for the sake of
> completeness, at least I found no report requesting it.

I suspect this was my fault back in the day and I added support just
because there was a configure probe for it and Xalan was available.  I
don't remember for certain, but that sounds like something I would have
done.

> Moreover, the only reverse dependency of libxml-security-c within Debian
> is Shibboleth, so we could risk pulling support...  If only the freeze
> wasn't so damn close.  Does this break ABI for consumers not using
> XPath/XSLT support (like Shibboleth)?

I would be fairly surprised if anything other than the Shibboleth
ecosystem used the xml-security-c libraries in Debian.  Certainly I've
never heard anyone talk about it if so.

-- 
Russ Allbery (rra at debian.org)              <https://www.eyrie.org/~eagle/>