Function path_within_root 

pub fn path_within_root(path: &Path, root: &Path) -> Result<bool>

Check that path is within root after canonicalization. Rejects symlinks that escape the root directory.