Module security 

Helpers for handling untrusted client input safely.

Functions

confine_path

Resolves a client-provided relative path inside root, refusing anything that could escape it.