Images on https://doc.wikimedia.org/Wikibase/master/php/ aren't getting displayed (and I'm pretty sure this used to work fine!?).

Example:
On https://doc.wikimedia.org/Wikibase/master/php/repo_rest-api_README.html the browser console says Content-Security-Policy: The page’s settings blocked the loading of a resource at https://doc.wikimedia.org/Wikibase/master/php/hexagonal_architecture.drawio.svg (“object-src”).

Possible solutions:

• check whether this can be fixed by changing the content policy accordingly
• update to a newer version of doxygen. Switching the <object> tag to an <img> also makes the image appear correctly, and this has been changed in a more recent doxygen version, see https://github.com/doxygen/doxygen/issues/7672 Doesn't work. At the time of writing our docs are generated using doxygen version 1.9.8, and this issue was supposed to be fixed in 1.8.18.
• work around it somehow