/** * Address checks for links and form targets that a host passes in. * * Both parse the address the way the browser will, so a `javascript:` * address cannot slip through behind whitespace or a line break, and an * address such as `//other.example`, `/\other.example` or a tab-split * `//other.example` cannot pass as a path on this site. */ /** * True for an address a link may point at: a path on the same site, or a * web, mail or phone address written out in full. A relative address * that would lead off the site is refused. */ export declare function isSafeHref(href: string): boolean; /** * True for an address on this site only: a path, or a web address whose * origin is the page's own. Use it where data is sent, such as a form's * `action`: another site must never receive what the user typed. */ export declare function isSameSiteHref(href: string): boolean; //# sourceMappingURL=safe-href.d.ts.map