using relative path, allows access

[schoeppl]

If one takes a relative path, the path protection does not work.
Using the given example:
Just change the file access to:
match File::open(&PathBuf::from("../../../../../bin/sh")) { ... }
will show this behavior.