/**
 * Vue Template XSS Pass
 *
 * Sprint 64 (cognium-dev #184, sprint 2 of 2). Synthetic-emission pass
 * that walks the `<template>` subtree of a Vue Single-File Component
 * looking for attribute bindings that write raw HTML
 * (`v-html`, `v-bind:innerHTML`, `:innerHTML`, `v-bind:outerHTML`,
 * `:outerHTML`). For each match it parses the RHS expression for JS
 * identifiers and resolves them against the set of tainted variable
 * names extracted from the file's `<script>` blocks. A match emits a
 * `vue-template-xss` finding (CWE-79).
 *
 * The pass is invoked from `analyzeMarkupFile()` only when
 * `language === 'vue'`; plain `.html` files skip it because raw-HTML
 * sinks there land in `javascript_dom_xss.yaml` via the JS pipeline.
 *
 * Pattern mirrors `html-attribute-security-pass.ts`: walk the tree
 * iteratively, emit `SastFinding` objects directly, no taint matcher,
 * no sink-config YAML.
 */
import type { Node as SyntaxNode } from 'web-tree-sitter';
import type { SastFinding } from '../../types/index.js';
import type { ScriptBlockResult } from './html-merge.js';
/**
 * Walk the parse tree for a Vue SFC and emit `vue-template-xss`
 * findings for dangerous template-attribute bindings that reference
 * tainted identifiers from the file's script blocks.
 *
 * @param rootNode - tree-sitter-html root node of the .vue file
 * @param filePath - path to the .vue file (for finding `file` field)
 * @param scriptResults - per-script-block IRs produced earlier in
 *   `analyzeMarkupFile()`. Each block's `ir.taint` + `ir.dfg` is the
 *   source of truth for which identifiers are tainted.
 */
export declare function runVueTemplateXssChecks(rootNode: SyntaxNode, filePath: string, scriptResults: ScriptBlockResult[]): SastFinding[];
//# sourceMappingURL=vue-template-xss-pass.d.ts.map