checked.
Use a built-in path canonicalization function (such as realpath() in C) that produces
the canonical version of the pathname, which effectively removes ".." sequences and
symbolic links (CWE-23, CWE-59). This includes: