/** * Known analytics / product-telemetry / session-replay hostnames. * * Rendered-mode audits would otherwise fire every client-side beacon on every * page they visit, injecting fake sessions into the site owner's dashboards. * The renderer intercepts outbound requests and aborts any whose hostname * includes one of these tokens (substring match — a single entry covers all * regional variants like `www.google-analytics.com`, `www1.google-analytics.com`, …). * * Conservative on the allow side: we don't block `fonts.googleapis.com`, * `gstatic.com`, `cdn.jsdelivr.net`, etc., because they can be legitimate * content-rendering dependencies. Errors-in-doubt are logged as warnings at * the call site and never throw. */ export declare const DEFAULT_ANALYTICS_HOSTS: readonly ["google-analytics.com", "googletagmanager.com", "doubleclick.net", "googleadservices.com", "googlesyndication.com", "pagead2.googlesyndication.com", "plausible.io", "umami.is", "umami.app", "fathom.io", "fathomdns.com", "simpleanalytics.com", "simpleanalyticscdn.com", "posthog.com", "mixpanel.com", "segment.com", "segment.io", "amplitude.com", "heap.io", "heapanalytics.com", "pendo.io", "mparticle.com", "rudderlabs.com", "hotjar.com", "fullstory.com", "clarity.ms", "mouseflow.com", "luckyorange.com", "smartlook.com", "logrocket.com", "lr-ingest.com", "sentry.io", "bugsnag.com", "hubspot.com", "hs-analytics.net", "hs-scripts.com", "marketo.com", "marketo.net", "intercom.io", "intercomcdn.com", "cloudflareinsights.com", "vercel-insights.com", "vercel-analytics.com", "matomo.cloud", "matomo.org", "datadoghq.com", "datadoghq.eu", "ddog-gov.com", "newrelic.com", "nr-data.net"]; /** * True when the URL's host contains one of the blocked substrings. In * `allow-first-party` mode, same-origin requests are allowed even if the host * matches the list (callers pass in the page origin). */ export declare function isAnalyticsRequest(url: string, options?: { pageOrigin?: string; blockedHosts?: readonly string[]; extraBlockedHosts?: readonly string[]; mode?: "block" | "allow" | "allow-first-party"; }): boolean; export type AnalyticsMode = "block" | "allow" | "allow-first-party"; //# sourceMappingURL=analytics-blocklist.d.ts.map