/** * Sanitize HTML to prevent XSS attacks while preserving print template styling * * This utility provides a centralized configuration for DOMPurify to ensure * consistent security across all print template components. * * @param html - The HTML string to sanitize * @returns Sanitized HTML string safe for rendering */ export declare function sanitizeTemplateHtml(html: string): string; /** * Sanitize user input in config fields to prevent XSS attacks * * Only sanitizes the 'content' field in customText blocks where users can enter arbitrary HTML. * Other fields are safe and should not be sanitized to preserve their intended values. * * @param fields - Array of config fields * @param blockTag - The block tag to determine which fields need sanitization * @returns Array of config fields with sanitized values */ export declare function sanitizeConfigFields(fields: ConfigField[], blockTag: string): ConfigField[]; /** * Sanitize all blocks before saving to database * * Ensures customText block's content field is sanitized to prevent XSS. * Template HTML from block definitions is not sanitized as it's from trusted source. * * @param blocks - Array of template blocks * @returns Array of blocks with sanitized content */ export declare function sanitizeBlocks(blocks: FdoPrintTemplateBlock[]): FdoPrintTemplateBlock[]; import type { ConfigField } from '../definitions/block-definitions';