The url can either be an absolute http/https url or a path inside JENKINS_HOME/userContent/. Path outside this directory are not allowed for security reasons. For backward compatibility path starting with [/]userContent/ are also possible.
Do not use the absolute url <jenkins_url>/userContent/... as the plugin would try to download the file from Jenkins as anonymous user which will fail if anonymous has no Overall/Read permissions.