lgtm,codescanning
* Route handlers registered using koa routing libraries are recognized as a source of remote user input. 
  Affected packages are
    [koa-route](https://www.npmjs.com/package/koa-route), and
    [koa-router](https://www.npmjs.com/package/koa-router)