[JENKINS-74372] [appscan] Extract inline script block in com/hcl/appscan/jenkins/plugin/actions/ScanResultsTrend/trendChart.jelly

Problem

```
== Inline Script Block
Line: 8
----
var builds=${it.buildFindingCounts};var title="${it.chartName}";
----

```

Solution

https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks

---
Originally reported by basil, imported from: [appscan] Extract inline script block in com/hcl/appscan/jenkins/plugin/actions/ScanResultsTrend/trendChart.jelly

• status: Open
  
• priority: Minor
  
• component(s): _unsorted
  
• label(s): CSP
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-08
  

Raw content of original issue

Problem




== Inline Script Block

Line: 8

----

<script type="text/javascript">var builds=${it.buildFindingCounts};var title="${it.chartName}";</script>

----





Solution


https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks

Open com/hcl/appscan/jenkins/plugin/actions/ScanResultsTrend/trendChart.jelly and inspect the inline script at line 8. Read the linked Jenkins CSP guidance first, then verify that the inline script block is extracted and the trend chart still receives its build counts and title without inline JavaScript.

Written by the indexing model from the issue text.