ignore sonar for eval of plugin bundles

scm-ui/src/components/PluginLoader.js

@@ -74,6 +74,7 @@ class PluginLoader extends React.Component<Props, State> {
       })
       .then(script => {
         // TODO is this safe???
+        // NOSONAR
         eval(script);
       });
   };