113bool mdl_path_join(
const char* parent,
const char* seg,
char* out,
size_t cap);
bool mdl_xml_escape(const char *src, char *out, size_t cap)
XML-escape src into out, failing rather than truncating.
bool mdl_path_join(const char *parent, const char *seg, char *out, size_t cap)
Join one safe child segment under a parent directory path.
bool mdl_path_contained(const char *parent, const char *candidate)
True when candidate is lexically contained under parent.
bool mdl_sanitize_segment(const char *raw, char *out, size_t cap)
Rewrite an untrusted path segment into a safe single filename.