code: func clean(fileName string) string {
  	return path.Clean(string(os.PathSeparator) + fileName)
  }
docs: // clean prevents path traversals by stripping them out.
  // This is adapted from https://golang.org/src/net/http/fs.go#L74