pub fn read_artifact_checked(
bundle_dir: &Path,
relative: &str,
max_bytes: u64,
) -> Option<String>Expand description
Read an artifact file, refusing paths that escape the bundle directory
and files whose actual size exceeds max_bytes (the size declared by the
reference is untrusted).