Scan for inline javascript in jelly files

[mawinter69]

What feature do you want to see added?

I would be good if we prevent that in new plugins jelly files contain inline javascript in any kind, be it as script tags that is not loading a script, any of the onaction attributes or evaluations like in checkUrl. Maybe make this part of the security scanner so that also existing plugins get an alert when using inline javascript.

Upstream changes

No response