/**
 * Returns true if `url` would carry credentials over a connection that is
 * neither HTTPS nor a loopback address (`localhost`, `127.0.0.1`, `::1`).
 * Returns false for any string that isn't a parseable URL, so a malformed
 * or relative URL is never treated as insecure by this check.
 *
 * @public
 */
export declare function isInsecureUrl(url: string): boolean;
/**
 * Logs a one-time `console.warn` per origin when `url` is insecure per
 * {@link isInsecureUrl} — e.g. an `Authorization` header or cookie about to
 * be sent over plain HTTP. Deduplicated per origin so a misconfigured
 * `baseURL` doesn't spam the console on every request.
 *
 * @public
 */
export declare function warnIfInsecureUrl(url: string): void;
//# sourceMappingURL=warn-insecure-url.d.ts.map