Stylesheets look pretty easy and safe to inline. Scripts are a security concern, unless you're enclosing the HTML report in an iframe with no capabilities (which I think is an easy and good thing to do, unless I'm missing some complications).