/***********************************************
 * mount_html_safe
 *
 * Safely mount untrusted HTML into a target element.
 *
 * Pipeline:
 *   1. Runs the raw HTML through `sanitize_external`, which:
 *        - parses via DOMPurify (or equivalent),
 *        - strips disallowed tags/attrs/URLs,
 *        - returns a trusted HTML string.
 *   2. Parses the sanitized string via a `<template>` element,
 *      so the markup is built in an inert DOM fragment.
 *   3. Appends the template’s `content` into `into` using a
 *      single `appendChild` call – no `innerHTML` on live nodes.
 *
 * Guarantees:
 *   - Never touches `into.innerHTML` directly.
 *   - Only sanitized, inert-parsed nodes are adopted into
 *     the live document.
 *
 * Limitations:
 *   - Relies entirely on `sanitize_external` to define what
 *     is allowed; “safe” here means “safe according to that
 *     sanitizer’s policy”.
 *
 * @param rawHtml  Arbitrary HTML source (potentially untrusted).
 * @param into     Host element that will receive the sanitized
 *                 DOM subtree as children.
 ***********************************************/
export declare function mount_html_safe(rawHtml: string, into: HTMLElement): void;
/***********************************************
 * set_attrs_safe
 *
 * Safely set an attribute on an existing element, with
 * aggressive blocking of dangerous names and URL payloads.
 *
 * Rules:
 *   - Hard-block:
 *       - Any attribute whose lowercase name starts with "on"
 *         (e.g. `onclick`, `onload`).
 *       - The `style` attribute (inline style injection).
 *   - URL attributes (`href`, `src`, `srcset`, `sizes`):
 *       - Extract each URL (handling `srcset`’s comma-separated
 *         list, reading only the URL token per item).
 *       - If any URL fails `ALLOWED_URI_REGEX`, the *entire*
 *         write is rejected.
 *   - For anchors with `target="_blank"`:
 *       - Ensures `rel` includes both `noopener` and `noreferrer`
 *         to avoid opener-based tab hijacking.
 *   - All other attributes are set verbatim via `el.setAttribute`.
 *
 * Notes:
 *   - This is a *write* guard only; it does not sanitize existing
 *     markup, only future attribute writes.
 *   - The URL policy is conservative: one bad URL cancels the
 *     whole attribute write.
 *
 * @param el     Target DOM Element.
 * @param name   Attribute name (case preserved on output, but
 *               normalized to lowercase for checks).
 * @param value  Attribute value to write.
 ***********************************************/
export declare function set_attrs_safe(el: Element, name: string, value: string): void;
/***********************************************
 * create_el_safe
 *
 * Create a DOM element while preventing direct instantiation
 * of high-risk HTML tags.
 *
 * Behavior:
 *   - If `tagName` is considered dangerous (case-insensitive):
 *       script, style, iframe, object, embed, link, meta, base,
 *       form, input, video, audio
 *     then:
 *       - Creates a literal `<_tag>` element instead.
 *       - Stores the original requested tag name in a `name`
 *         attribute via `set_attrs_safe`, so callers can later:
 *           - inspect or log the intent,
 *           - render a safe placeholder,
 *           - or transform via a controlled path.
 *   - Otherwise:
 *       - Returns `document.createElement(tagName)` as-is.
 *
 * Intent:
 *   - Enforce a “no dangerous element constructors” rule in
 *     the parsing pipeline.
 *   - Keep a reversible trace of the original tag choice
 *     without exposing the browser to its native behavior.
 *
 * @param tagName  The requested HTML tag name.
 * @returns        A safe HTMLElement, either the requested tag
 *                 or a neutral `<_tag name="original">` wrapper.
 ***********************************************/
export declare function create_el_safe(tagName: string): HTMLElement;
//# sourceMappingURL=safe-mount.safe.d.ts.map