Function validateUrl

validateUrl(url: string, baseUrl?: string, options?: ValidateUrlOptions): string
Validate a URL strictly against a protocol whitelist (http, https, data:image).
Parameters
- url: string
  The URL string to validate.
- OptionalbaseUrl: string
  Optional base URL for relative URL resolution. Defaults to location.origin.
- Optionaloptions: ValidateUrlOptions
  Optional: set httpsOnly: true to reject http: (production hardening).
Returns string
The normalized absolute URL string.

Security
Rejects javascript:, vbscript:, data:text/html and other dangerous protocols.

Throws
If the URL is invalid or the protocol is not allowed.
- Defined in src/kernel/security/validators.ts:111