Function safe_join 

pub fn safe_join(base: &Path, name: &str) -> Result<PathBuf, PathSafetyError>

Join a single untrusted name onto base, guaranteeing the result is a direct child of base.

Errors

Returns a PathSafetyError if name is not a safe single component (see validate_component).