/**
 * Sanitizes a URL intended for an `href` attribute. Returns `undefined` when the
 * URL uses a dangerous scheme (`javascript:`, `vbscript:`, `data:`) so the attribute
 * is omitted instead of becoming a script-execution or data-injection vector.
 * Safe and relative URLs are returned unchanged.
 */
export default function (href?: string): string | undefined;