Function ensure_inside 

pub fn ensure_inside(
    root: impl AsRef<Path>,
    path: impl AsRef<Path>,
) -> Result<PathBuf, PathError>

Normalize both paths and ensure path stays inside root.

Returns the normalized path on success.

Filesystem access

No.

Security

Not symlink-safe. See module documentation.