/** * Network Validation Utilities * * Validation functions for network-related data including URLs, email addresses, * and username validation with security considerations. */ /** * True if `hostname` is a loopback, private, link-local, unique-local, or known * cloud-metadata address/name. This is the single source of truth for the SSRF * denylist — shared by `ConfigurationSchema`'s `UrlSchema`, * `WordPressClient.validateAndSanitizeUrl`, and `validateUrl` below, so the * policy can't drift between call sites. * * Callers should skip this check entirely when `ALLOW_PRIVATE_URLS=true`. */ export declare function isDisallowedHostname(hostname: string): boolean; /** True when the operator has explicitly opted in to private/loopback URLs (local dev). */ export declare function isPrivateUrlAllowed(): boolean; /** True when the operator has explicitly opted in to plain-HTTP URLs (local dev). */ export declare function isInsecureHttpAllowed(): boolean; /** * Validates and sanitizes URLs with enhanced edge case handling */ export declare function validateUrl(url: string, fieldName?: string): string; /** * Validates email addresses */ export declare function validateEmail(email: string): string; /** * Validates username format with enhanced security checks */ export declare function validateUsername(username: string): string; //# sourceMappingURL=network.d.ts.map