Added file path security and removed the feedback of what file isn't found

Author: SC7639

index.js

@@ -113,9 +113,8 @@ module.exports = (http) => {
           if (this.assetPaths.hasOwnProperty(fileType) && this.assetPaths[fileType].hasOwnProperty('path')) {
             const { path: filePath } = this.assetPaths[file];
             file = filePath.replace(`${assetType}/`, '');
+            this.renderAsset(assetType, file, assetType, res);
           }
-
-          this.renderAsset(assetType, file, assetType, res);
         }
       }
       else {
@@ -199,12 +198,14 @@ module.exports = (http) => {
      * @param string stripFromPath
      */
     renderAsset(path, file, assetType, res, stripFromPath) {
+      file = file.replace(/\.\.\//g, '');
       const filePath = `${path}${file}`.replace(stripFromPath, '');
 
       fs.readFile(filePath, (err, data) => {
         if (err) {
+          // console.error(err);
           res.statusCode = 404;
-          res.end(`File ${filePath} doesn't exist`);
+          res.end(`File not found`);
         }
 
         if (assetType == 'js') {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "small-router",
-  "version": "1.1.10",
+  "version": "1.1.12",
   "description": "Small router module that creates http server and runs callbacks that have have been added for a route via the api",
   "main": "index.js",
   "scripts": {