How we found a directory traversal vulnerability in Rails routes | Hacker News Reader