returns error if there is no match swaps the longest matching prefix for the mapped file system directory path and keep the rest of the string the same.

Checks that the file name only contains numbers, letters, underscore, dot, and dash.

Generic url path sanitizer: ensures only POSIX symbols in path and defends against directory traversal.