A file is read from a path built with interpolated variable data.
Canonicalize the path and confine it to an allowed base directory before reading.