Function resolve 

fn resolve(sandbox: &Path, relative: &str) -> Result<PathBuf>

Resolve a crate-relative path inside sandbox, rejecting ../absolute and escapes.