Now it's possible to pass configuration arguments in the Draw.io service url configuration option of the plugin. For example, if you have a local Draw.io installation at http://drawio.local, you can configure the url as:

http://drawio.local/draw?stealth=1

to disable loading diagrams from external urls.