Does draw.io support OpenGraph or oEmbed?
If it does, it is a simple matter of adding the domain to the whitelist.