### Fixes

- QA channel/security: reject non-HTTP(S) inbound attachment URLs before media fetch, and log rejected schemes so suspicious or misconfigured payloads are visible during debugging. (#70708) Thanks @vincentkoc.

- Teams/security: require shared Bot Framework audience tokens to name the configured Teams app via verified `appid` or `azp`, blocking cross-bot token replay on the global audience. (#70724) Thanks @vincentkoc.

- Plugins/startup: resolve bundled plugin Jiti loads relative to the target plugin module instead of the central loader, so Bun global installs no longer hang while discovering bundled image providers. (#70073) Thanks @yidianyiko.

- Anthropic/CLI security: stop Claude CLI backend defaults from forcing `bypassPermissions`, and strip malformed permission-mode overrides instead of silently falling back to a bypass. (#70723) Thanks @vincentkoc.

import { describe, expect, it } from "vitest";

import { isHttpMediaUrl } from "./inbound.js";

describe("isHttpMediaUrl", () => {

it("accepts only http and https urls", () => {

expect(isHttpMediaUrl("https://example.com/image.png")).toBe(true);

expect(isHttpMediaUrl("http://example.com/image.png")).toBe(true);

expect(isHttpMediaUrl("file:///etc/passwd")).toBe(false);

expect(isHttpMediaUrl("/etc/passwd")).toBe(false);

expect(isHttpMediaUrl("data:text/plain;base64,SGVsbG8=")).toBe(false);

});

});

import { getQaChannelRuntime } from "./runtime.js";

import type { CoreConfig, ResolvedQaChannelAccount } from "./types.js";

export function isHttpMediaUrl(value: string): boolean {

try {

const parsed = new URL(value);

return parsed.protocol === "http:" || parsed.protocol === "https:";

} catch {

return false;

}

}

async function resolveQaInboundMediaPayload(attachments: QaBusMessage["attachments"]) {

if (!Array.isArray(attachments) || attachments.length === 0) {

return {};

continue;

}

if (typeof attachment.url === "string" && attachment.url.trim()) {

if (!isHttpMediaUrl(attachment.url)) {

console.warn(

`[qa-channel] inbound attachment URL rejected (non-http scheme): ${attachment.url}`,

);

continue;

}

const saved = await saveMediaSource(attachment.url, undefined, "inbound");

mediaList.push({

path: saved.path,