fossil user capabilities has no validation of permissions string


<hr><div id="ff58c40e926f9104"><i>On 2008-11-24 01:51:01 UTC  added:</i><br />
cgi contructs self referential path names wrong. cant use index.cgi or dispatching cgi for multiple projects

commit comments are plain text but displayed as html which removes formatting like newlines and spaces</div id="ff58c40e926f9104">

<hr><div id="0fe7895629d6f18b"><i>On 2008-11-24 02:18:26 UTC  added:</i><br />
no way to escape @ in password when referencing a repository via url</div id="0fe7895629d6f18b">

<hr><div id="19dc52d77328989a"><i>On 2008-11-24 03:51:27 UTC anonymous (claiming to be rockshox) added:</i><br />
needs option to abort commit if comment file unchanged</div id="19dc52d77328989a">