/**
 * DOM/XSS Detection
 *
 * Detection logic for XSS-related patterns like innerHTML, dangerouslySetInnerHTML,
 * and document.write.
 */
/**
 * Check if innerHTML is being used on a style element (CSS injection is not XSS)
 */
export declare function isStyleElementInnerHTML(lineContent: string, content: string, lineNumber: number, lines?: string[]): boolean;
/**
 * Check if innerHTML/dangerouslySetInnerHTML uses static content only
 */
export declare function isStaticHTMLContent(lineContent: string, content: string, lineNumber: number, lines?: string[]): boolean;
/**
 * Check if dangerouslySetInnerHTML is used with DOMPurify sanitization
 */
export declare function hasDOMPurifySanitization(lineContent: string, content: string, lineNumber: number, lines?: string[]): boolean;
/**
 * Check if data flows to an LLM prompt rather than a DOM sink
 * LLM prompts are NOT XSS - they're prompt injection (different risk profile)
 */
export declare function isLLMPromptContext(lineContent: string, content: string, filePath: string): boolean;
/**
 * Check if innerHTML uses output from trusted HTML rendering libraries
 * Libraries like Shiki, highlight.js, marked, etc. produce sanitized HTML
 */
export declare function isTrustedLibraryHTMLOutput(lineContent: string, content: string, lineNumber: number, lines?: string[]): boolean;
/**
 * Check if this is a static bootstrap script (e.g., localStorage theme reader)
 * These are very low risk even with dangerouslySetInnerHTML
 */
export declare function isStaticBootstrapScript(_lineContent: string, content: string, lineNumber: number, lines?: string[]): boolean;
//# sourceMappingURL=dom-xss.d.ts.map