/** Block SSRF to private/link-local/metadata hosts when fetching user-supplied URLs. */
export declare function isBlockedFetchHost(hostname: string): boolean;
/** Validate http(s) ticket provider base URLs before server-side fetch. */
export declare function isAllowedTicketBaseUrl(raw: string): boolean;
/** Validate cloud/sync server URLs before storing from the local UI. */
export declare function isAllowedSyncServerUrl(raw: string): boolean;