only if it is CONTAINED under a particular directory or set of
directories. A path traversal vulnerability occurs if a user can use
SYNTACTIC MANIPULATIONS (such as ".." or "/a/b") that cause the
generated filename to violate the CONTAINMENT property.