Rules for checking that a filename is safe

Question

Is the following sufficient to check that a path is not malicious, and is the validation against these rules correct:

1. Path must have non-zero length
2. It mus