Fixed vulnerability related w/ file include using absolute path

src/models/templates.js

@@ -36,7 +36,7 @@ module.exports = {
 		
 		switch (ext) {
 			case 'ejs':
-				return ejs.render(template, vars, {filename: `${TEMPLATES_DIR}/${templateName}`});
+				return ejs.compile(template, {filename: `${TEMPLATES_DIR}/${templateName}`, root: TEMPLATES_DIR})(vars);
 			case 'hbs':
 			case 'handlebars':
 				return handlebars.compile(template)(vars);