safe_join('/foo/bar', 'test')
safe_join('/foo/bar', 'test/../other_test')
safe_join('/foo/bar', 'test/../../../etc/htpassw')
How can I securely pass an arbitrarily deep path to a webapp (Flask, in this case)?