pub fn validate_path_within(target: &Path, base_dir: &Path) -> Result<PathBuf>
Canonicalize both paths and confirm target is a descendant of base_dir.
target
base_dir