/**
 * Lightweight HTML sanitizer for LLM-generated visualization HTML.
 *
 * Primary threat: prompt injection via work item data (e.g., a title containing <script>).
 * The design system prompt instructs the LLM to HTML-escape data values (primary defense).
 * This sanitizer is the secondary defense layer.
 *
 * Allows: inline scripts, Chart.js CDN, event handlers (needed for interactivity).
 * Strips: external scripts (non-CDN), iframes, objects, embeds, base, meta, external forms.
 */
export declare function sanitizeGenUiHtml(html: string): string;
//# sourceMappingURL=sanitize-html.d.ts.map