pub fn resolve_under_root(root: &Path, relative: &str) -> Result<PathBuf>
Resolve relative under root, rejecting .. and paths that escape root.
relative
root
..