The HTML5 Report Viewer uses inline templates which may require enabling the unsafe-eval CSP policy.
The viewer should migrate to using CSP templates as shown in Getting Started with Content Security Policy (CSP) Templates - Kendo UI Templates - Kendo UI for jQuery.