Recently I used some report generator to generate the reports in Jenkins. Some of them tends to use the library in CDN or external network.
I think it’s reasonable to use the external library, since jenkins keeps the reports for every build, it’s kind of waste that it always keep something never changed.
According to official doc, use
System.setProperty("hudson.model.DirectoryBrowserSupport.CSP","script-src 'unsafe-inline'")
and inputing the command in Jenkins console makes it work.