allow-same-origin to the sandbox Content-Security-Policy directive of workspace and artifact browsers if the Resource Root URL feature is not used.
Allow requests to resources like stylesheets and images, even if a reverse proxy prohibits cross-site requests.
JENKINS-71366
login-theme-plugin (regression in 2.404).
JENKINS-71238