pub fn ensure_safe_path(path: &Path) -> Result<()>
Ensure path is safe (doesn’t escape the foundry directory)