/**
 * Move all child nodes from source to target.
 * Clears target first, then moves each child node from source.
 */
export declare function transferContent(source: Node, target: Node): void;
/**
 * Read an element's inner HTML.
 */
export declare function serializeHTML(el: {
    innerHTML: string;
}): string;
/**
 * Decode HTML entities in a string (e.g. `&` → `&`).
 * Uses a <textarea> element which is safe for entity decoding.
 */
export declare function decodeHTMLEntities(doc: Document, text: string): string;
/**
 * Escape HTML special characters in a string.
 */
export declare function escapeHtml(text: string): string;
/**
 * Safely get an element's class name as a string.
 * Handles SVG elements where className is an SVGAnimatedString.
 */
export declare function getClassName(el: Element): string;
export declare function hasResponsiveShowClass(className: string): boolean;
/**
 * Check if a URL uses a dangerous protocol (javascript:, blob:, non-image data:).
 * Strips whitespace and control characters before checking.
 *
 * data: and blob: smuggle a whole document into an attribute, bypassing the
 * script and event-handler stripping done elsewhere. Inline images are the one
 * benign use of data:, so those are allowed and every other media type is
 * rejected. Relative URLs (no scheme) are always allowed — the bbcode and
 * comment builders pass them.
 */
export declare function isDangerousUrl(url: string, allowInlineImage?: boolean): boolean;
/**
 * Check if an element belongs directly to an ancestor table,
 * not to an intervening nested TABLE.
 */
export declare function isDirectTableChild(el: Node, ancestor: Node): boolean;
/**
 * Parse an HTML string into a DocumentFragment.
 * Uses a <template> element when available (safer: no script execution,
 * no resource loading). Falls back to a <div> for environments that
 * don't support template.content (e.g. some server-side DOM libraries).
 */
export declare function parseHTML(doc: Document, html: string): DocumentFragment;