https://github.com/jenkinsci/workflow-support-plugin/blob/f8d41ac42279d1811b81b0afb5e6e2e4b95843fe/src/main/java/org/jenkinsci/plugins/workflow/support/steps/input/POSTHyperlinkNote.java#L86
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers
jenkinsci/workflow-support-plugin/pull/284