pub fn path_escapes_workspace(path: &str, workspace: &str) -> bool
Check if a path escapes the workspace