Detect path traversal in file operations

File reads and writes that join a base directory with user input are traversal bugs unless the resolved path is re-checked.