Function safe_join 

pub fn safe_join(dir: &Path, name: &str) -> Result<PathBuf, MhtmlError>

dir/name, refused unless name is a single plain file name.