Where does the bug appear (feature/product)?
Cursor IDE
Describe the Bug
The agent WebFetch tool rewrites pages that the server already returns as text/markdown. The rewrite deletes image alt text and strips angle-bracket placeholders. On the Auto-review docs page, the check order exists only as the alt text of one image, so the fetched page says “Cursor checks each call in this order:” and then has no steps. The docs reader treats that as a truncated page and fetches the same URL again.
Steps to Reproduce
- Fetch the raw page:
curl -sS -D - -o /tmp/run-modes.md https://cursor.com/docs/agent/security/run-modes.md
The response Content-Type is text/markdown. - In that file, confirm these two lines are present:
- “Cursor checks each call in this order:” followed by an image whose alt text is the execution lifecycle (allowlisted shell, Fetch, and MCP calls run outside the sandbox; other shell commands run in the sandbox; the rest go to the classifier).
- The table cell
<project-dir>/.cursor/permissions.json
- In Agent chat, have the agent call WebFetch on that same URL.
- Compare the tool result to the curl body.
Expected Behavior
WebFetch returns the markdown the server sent. The image alt text is kept as text, because that caption is the only copy of the check order. The <project-dir> placeholder is kept.
Operating System
MacOS
Version Information
Cursor version: 3.24.18
Operating system: macOS 26.6.2 (build 25G83)
For AI issues: add Request ID with privacy disabled
Request IDs: 05a31cf6-8bb8-4754-ab17-84f6b222cf57 and 70e4c79d-4a10-4129-ade3-37e4bd3337e4
Additional Information
Actual Behavior
WebFetch returns the page with the image and its alt text removed, so “in this order:” is followed immediately by the next paragraph. The path <project-dir>/.cursor/permissions.json comes back as /.cursor/permissions.json.
This is not a local configuration. User settings have no fetch or markdown option, and hooks do not match WebFetch.
Does this stop you from using Cursor
No - Cursor works, but with this issue