lucent-ui 0.41.0 → 0.42.0

package/dist/index.d.ts

@@ -1187,6 +1187,9 @@ export declare interface LucentTokens extends SemanticColorTokens, TypographyTok
  * Generates a CSS string of custom properties from a token set.
  * Inject the result into a <style> tag or a CSS-in-JS solution.
  *
+ * Token values are sanitized to prevent CSS injection — characters that
+ * could break out of a property value context (`{};<>@\`) are stripped.
+ *
  * @example
  * const css = makeLibraryCSS(lightTokens);
  * document.getElementById('lucent-tokens').textContent = css;
@@ -1628,6 +1631,15 @@ export declare interface RowProps {
     'aria-labelledby'?: string;
 }
 
+/**
+ * Returns the href unchanged if it uses a safe protocol (http, https, mailto, tel,
+ * or relative path), otherwise returns `undefined` to prevent navigation.
+ *
+ * Blocks `javascript:`, `data:`, `vbscript:`, and any other executable protocol
+ * that could be used for XSS via href injection.
+ */
+export declare function sanitizeHref(href: string | undefined): string | undefined;
+
 export declare function SearchInput({ value, onChange, mode, placeholder, size, label, helperText, errorText, results, onResultSelect, isLoading, disabled, id, style, }: SearchInputProps): JSX_2.Element;
 
 export declare const SearchInputManifest: ComponentManifest;