Directory Traversal

larvitrouter is vulnerable to directory traversal. Lack of validation in the URL path of requests in the resolve function allows remote attacker to access files outside of the route root using the ../ characters...