bolt/bolt — pull request #380 by richardhinkamp (2013-04-23 11:40:10+00:00)
Title: Don't allow requesting anything in /vendor/ and /app/ except /app/view/ and /app/classes/

Fixes #375