Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir