/**
 * Validates that a URL is same-origin as the current location.
 * Prevents credentials from leaking to cross-origin endpoints (CWE-319).
 * SSR-safe: returns true if window is undefined.
 *
 * @param url - The URL to validate (may be relative or absolute)
 * @param baseURL - Optional base URL for resolving relative URLs
 * @returns true if the resolved URL has the same origin as window.location, or if running server-side
 * @internal
 */
export declare const isSameOrigin: (url?: string, baseURL?: string) => boolean;
//# sourceMappingURL=sameOrigin.d.ts.map