Advisory: Upcoming Browser Change Affects XML Message Viewing

Advisory ID	Products Affected	Risk Category & Score	Explicit Requirements
DP-456155	All existing InterSystems interoperability products and solutions that use browser-based XSLT, including: InterSystems IRIS® InterSystems IRIS® for Health InterSystems® Health Connect InterSystems EMPI InterSystems HealthShare: Unified Care Record and Information Exchange Clinical Viewer Health Insight Patient Index Provider Directory Personal Community Care Community InterSystems TrakCare®	Operational: High	Customers must apply an available product update before the browser change or use an interim mitigation described below.

• Starting November 17, 2026, Chrome and Edge web browsers are expected to remove built-in XSLT processing. XML content that InterSystems product pages currently transform in the browser will no longer render as intended after the update. Other web browsers also intend to remove XSLT processing in the near future.
  
• The confirmed impact includes XML message viewing in the Management Portal Visual Trace and Message Viewer, and Zen Reports. Related Health Connect Cloud, HealthShare, and TrakCare surfaces that use client-side XSLT may also be affected. InterSystems continues to validate the full product scope.

After Chrome and Edge remove built-in XSLT processing, a number of browser-based InterSystems applications may no longer display transformed XML message content fully. This includes:

• The Message Viewer and the Visual Trace (for working with interoperability productions in the Management Portal)
• TrakCare applications that render referral documents or related information
• HealthShare visual interfaces that inherit any of this browser-based behavior

When troubleshooting message processing, or when developing Interoperability Productions, applications like the Message Viewer and Visual Trace are often used. These visual application surfaces are impacted by this issue.

After Chrome and Edge remove built-in XSLT processing, affected pages may not display transformed XML message content fully. In the Management Portal, this can prevent message content from appearing in the Visual Trace and the Message Viewer. Affected TrakCare applications may be unable to render referral documents or related information, while HealthShare surfaces that inherit the same browser-based behavior may fail in similar ways.

The underlying XML data is not changed by this browser update; the issue affects only how content is transformed and displayed in the browser.

• Preferred action: Updates will be available for every currently supported version of every affected product. Apply the applicable InterSystems product update when it becomes available. The specific corrections for this issue – DP-456450 and HSHC-5703 – will be available in these versions.
  
  • InterSystems is developing product fixes and plans to make them available in the following product versions before November 17, 2026, via https://downloads.intersystems.com/:
    
    • For customers on a 2026.1.x version of InterSystems IRIS, InterSystems IRIS for Health, or Health Connect, a fix will be available in the 2026.1.6 version (release planned for October 28, 2026).
    • For customers on a 2025.1.x version of InterSystems IRIS, IRIS for Health, or Health Connect, a fix will be available in the 2025.1.6 version (release planned for October 28, 2026).
    • For customers on a version of HealthShare product, a fix will be available in the HS 2026.2 product versions (releases planned for October 29, 2026).
  • Additional product versions with fixes are expected to be available soon after November 17, 2026, via https://downloads.intersystems.com/:
    
    • For customers on a 2024.1.x version of InterSystems IRIS, InterSystems IRIS for Health, or Health Connect, a fix will be available in the 2024.1.7 version (release planned for November 12, 2026).
    • For customers on a 2018.1.x version of InterSystems Caché or Ensemble, a fix will be available in the 2018.1.13 version (release planned for November 12, 2026).
    • 2026.3.0 versions of InterSystems IRIS, InterSystems IRIS for Health, or Health Connect address the issue and are expected to be available November 18, 2026.
• Immediate workaround: Many impacted pages, for example the Message Viewer, have the option to view XML Source. This option opens a new browser window and requests raw XML from the server, allowing the user to see the full contents of the XML, although it will not be styled. End users may optionally evaluate the installation of an “XSLT Polyfill” browser extension for Chrome or Edge to restore the affected functionality. Google provides information on this mitigation strategy. This is a third-party component that may introduce risk and is not supported by InterSystems. Customers should evaluate and approve its use under their own security and browser-extension policies.
• If an upgrade cannot be completed before November 17: Consider preventing the affected browser from automatically updating, either on individual systems or through an enterprise-managed software policy, until the applicable InterSystems update can be deployed. Customers should evaluate the security and operational implications of delaying browser updates.

If you have questions or need assistance, please contact InterSystems Support through the Worldwide Response Center (WRC).
To keep abreast of all release and alert notifications, follow the InterSystems Official channel via the InterSystems Developer Community.