pub(super) fn read_abf_file_path(path: &str) -> Result<Vec<u8>, String>Expand description
Reads a file_path input server-side (Phase 3 spec §3.0.5). Opens the
path with a no-follow mechanism so a symlink fails to open at all
rather than being silently resolved to its target (round 6) — one
handle, one continuous read, no second path resolution for anything to
race against (round 5’s TOCTOU fix): metadata comes from that SAME open
handle and is checked against MAX_ABF_FILE_SIZE_BYTES BEFORE any read
(round 4); the actual read is still hard-bounded via .take(...)
regardless of what the metadata claimed.