/**
 * Whether the original request `url` is on a configured safe domain. Plain
 * entries match that host exactly; `*.example.com` matches subdomains at any
 * depth but not `example.com` itself. Only credential-free `https:` URLs on
 * the default port qualify. Pure: no DNS, redirects, or record-declared URLs.
 */
export declare const isExternalRecordUrlSafe: (url: string, domains: readonly string[]) => boolean;
//# sourceMappingURL=index.d.ts.map