import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
/**
 * Advisory review of Experience Cloud CSP / Lightning Web Security posture.
 * The per-site CSP level ("Strict" vs "Relaxed") and the Lightning Web Security
 * toggle are not reliably exposed to SOQL/Tooling, so for each live site this
 * emits a targeted manual-verification item rather than a false pass. Relaxed CSP
 * or disabled LWS on a public site widens the XSS / script-injection surface that
 * unauthenticated visitors can reach.
 */
export declare class ExperienceCspCheck implements SecurityCheck {
    readonly id = "experience-csp";
    readonly name = "Experience Cloud CSP & Lightning Web Security";
    readonly category = "Access Control";
    readonly description = "Advises verifying Strict CSP and Lightning Web Security on live Experience Cloud sites (not reliably API-readable), to limit XSS/script-injection exposure";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=ExperienceCspCheck.d.ts.map