How do you prevent command injection and path traversal in Node?

Write or say your answer first, then compare it with the model answer.