Function read_file_within 

pub fn read_file_within(base: &Path, path: &Path) -> Result<String, Error>

Reads a file only when its resolved path remains inside base.

Errors

Returns an error if either path cannot be canonicalized, the file is outside base, or the file cannot be read.