pub fn is_symlink_safe(path: &Path, root: &Path) -> bool
Check that a symlink target is still within root.