Expressjs's "express.static()" prevents directorypath traversal by default but I though