Same failure as the icon collections: img-src 'self' in the CSP silently blocked these, they just happened to load once from browser cache before this fix made them visibly broken.
