Does route data get merged with the top level ring router and any route maps along the way?

well, I accidentally found an attack vector on reitit via coercion: On -encode-error, the schema and errors get serialized with edn, which is extremely expensive. Since schema and errors return by default from coercion, it is possible to induce extreme load on a server with complex schema by sending invalid requests

(-encode-error [_ error]
         (cond-> error
           (show? :humanized) (assoc :humanized (me/humanize error {:wrap :message}))
           (show? :schema) (update :schema edn/write-string opts)
           (show? :errors) (-> (me/with-error-messages opts)
                               (update :errors (partial map #(update % :schema edn/write-string opts))))

:error-keys #{:type :coercion :in :schema :value :errors :humanized #_:transformed}