fix: pre-read static fallback file to prevent un-rate-limited fs access

🤖 Generated with [OpenCode](https://opencode.ai) (Smart-router)

Author: daquinoaldo

src/index.ts

@@ -57,16 +57,18 @@ const createServer = (domain = process.env["HOST"] || "localhost"): HttpsLocalho
     const p404 = staticPath + "/404.html"
     const index = staticPath + "/index.html"
     const fallback = fs.existsSync(p404)
-      ? { status: 404, file: path.resolve(p404) }
+      ? { status: 404, content: fs.readFileSync(path.resolve(p404)) }
       : fs.existsSync(index)
-        ? { status: 200, file: path.resolve(index) }
+        ? { status: 200, content: fs.readFileSync(path.resolve(index)) }
         : undefined
 
     app.use(express.static(staticPath))
-    // codeql[js/missing-rate-limiting]
     app.use((_req: Request, res: Response) => {
-      if (fallback) res.status(fallback.status).sendFile(fallback.file)
-      else res.status(404).send("Not found.")
+      if (fallback) {
+        res.status(fallback.status).type("html").send(fallback.content)
+      } else {
+        res.status(404).send("Not found.")
+      }
     })
     console.info("Serving static path: " + staticPath)
     void app.listen(port)