In Apache JMeter, this file https://github.com/apache/jmeter/blob/c98be3f40009caffb8b66aded702356d975bb4d7/bin/report-template/content/js/graph.js.fmkr is a Freemarker template used to generate a "graph.js" JS file that can contain large images serialized arrays of digits and time series arrays with large number of integer or float values.
This is not specific to JS or JMeter. Go programs routinely embed data files, and C crypto code routinely contains generated tables of numbers or byte as hex-encoded values used either to speed up processing or as the basic for encryption.
These can be the source of scan timeouts (I have seen some generated arrays several MB big).
We should ignore these for scanning as they contain no data of value (short of being decoded which is else entirely).
But also be careful and mindful that other use cases (such as detection of cryptographic code) may need these number arrays.
In Apache JMeter, this file https://github.com/apache/jmeter/blob/c98be3f40009caffb8b66aded702356d975bb4d7/bin/report-template/content/js/graph.js.fmkr is a Freemarker template used to generate a "graph.js" JS file that can contain large images serialized arrays of digits and time series arrays with large number of integer or float values.
This is not specific to JS or JMeter. Go programs routinely embed data files, and C crypto code routinely contains generated tables of numbers or byte as hex-encoded values used either to speed up processing or as the basic for encryption.
These can be the source of scan timeouts (I have seen some generated arrays several MB big).
We should ignore these for scanning as they contain no data of value (short of being decoded which is else entirely).
But also be careful and mindful that other use cases (such as detection of cryptographic code) may need these number arrays.