report has many errors when served over https

[SiKing]

Our Jenkins serves everything over https. If I navigate to the Serenity report, I get many errors. Most images do not show up. Here is a sample of some of the errors:

Refused to load the image 'https://jenkins.<redacted>/target/site/serenity/apple-icon-120x120.png' because it violates the following Content Security Policy directive: "img-src 'self'".

Refused to load the stylesheet 'https://jenkins.<redacted>/target/site/serenity/fontawesome-free-5.7.2-web/css/all.min.css' because it violates the following Content Security Policy directive: "style-src 'self'". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.

Blocked script execution in 'https://jenkins.<redacted>/target/site/serenity/index.html' because the document's frame is sandboxed and the 'allow-scripts' permission is not set.

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-m/fXop+8Df+PEhbu/x8a0BI3SL5bxeswmHRjTW3kPqM='), or a nonce ('nonce-...') is required to enable inline execution.

index.html alone has 63 of the above.

[wakaleo]

This is a Jenkins configuration question - see https://wiki.jenkins.io/plugins/servlet/mobile?contentId=85590490#content/view/85590490.

It’s not directly related to Serenity (ie there is nothing in the Serenity code or configuration you need to change).