pub fn write(
tool: &str,
root: &Path,
candidate: &Path,
bytes: &[u8],
) -> Result<PathBuf, String>Expand description
Write bytes to a bundle destination below root, refusing a symlinked
final component. destination leaves a dangling symlink unresolved (the
jail resolves only the existing ancestor), so a cloned repository can ship
bundle.xml -> ../../outside; the confined write rebuilds the path below
the project and fails closed on any symlinked component.