<script type="text/javascript">

    //My code Before veracode static scan
    var userObj = ${userObj};
    var settingsObj = ${settingsObj};

    //I changed like below it is working, but veracode scan giving error.
    var userObj = <%= request.getAttribute("userObj") %>;
    var settingsObj = <%= request.getAttribute("settingsObj") %>;

    //My code after veracode static scan. veracode scan raised issue with above code so i fixed like below.
    var userObj = '<c:out value="${userObj}"/>';
    var settingsObj = '<c:out value="${settingsObj}"/>';
</script>

{"userName":"st_user"}

{"userName":"st_user"}