Function normalize_under_root 

pub fn normalize_under_root(root: &Path, candidate: &Path) -> Result<PathBuf>

Normalize a user-supplied path and ensure it stays within an allowed root. Reject absolute paths and any that escape via ...