Function resolve 

fn resolve(target: &str, dir: &Path) -> Option<PathBuf>

The file target asks for, or None for a request to refuse.

The root serves the page; anything escaping dir (..) is refused rather than resolved.