Link preview only works on mobile app

By any chance, do you have any specific CORS policies enabled, or same-site script-security measures enabled that are different from the configuration explicitly mentioned by the Mattermost install documentation?