/**
 * The refusal reason for a URL we will not fetch, or null when it is allowed.
 *
 * Returns the reason rather than throwing so the caller can name the target
 * back to the caller who asked -- and only to them. A refusal is never logged
 * or transmitted.
 */
export declare function ssrfRefusal(raw: string): string | null;
//# sourceMappingURL=ssrf-guard.d.ts.map