Move static content for reports into a top-level directory.  Use a dedicated backend controller to serve it out.