pub fn read_contained(bundle_dir: &Path, path: &Path) -> Option<String>
Read a bundle document, refusing targets that resolve outside the bundle.