Culprit:
UserRemoteConfig/config.groovy#L11-L17

I'm not sure what this is supposed to do.

Reproduction steps:

• Install Git or clone https://github.com/jenkinsci/git-plugin and then mvn hpi:run
• Create a Freestyle project
• In the "Source Code Management" section click on "Git"
• Add a new Credential
• In the Credentials select, change your credential

Screenshot attached about where the feature is displayed.

Proposal
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers

Testing notes

• Ensure to reproduce the feature before any change
• Ensure that you reproduce the feature after you have made the change