Culprit: History/index.jelly#L38-L40

Will potentially requires to have https://github.com/jenkinsci/stapler/pull/385 merged before.

Reproduction steps:

• Install JUnit or clone https://github.com/jenkinsci/junit-plugin and then mvn hpi:run
• Create a freestyle job
• Add a post-build "Publish JUnit test result report"
• Add "report.xml" as "Test report XMLs".
• Save + run the job once
• Then put in the workspace the content copy-pasted of TEST-com.areyes1.junitreport.service.JUnitReportServiceExampleTest.xml inside report.xml.
• Run the job multiple times
• Then click on the "History" from the sidenav.

If you open your DevTools, you will see code equivalent of what is displayed on the screenshot attached. The idea is to remove the inline JavaScript that is generating the makeStaplerProxy, or making it CSP compliant.