fossil user capabilities has no validation of permissions string


<hr><div id="ff58c40e926f9104"><i>On 2008-11-24 01:51:01 UTC  added:</i><br />
cgi contructs self referential path names wrong. cant use index.cgi or dispatching cgi for multiple projects

commit comments are plain text but displayed as html which removes formatting like newlines and spaces</div id="ff58c40e926f9104">

<hr><div id="0fe7895629d6f18b"><i>On 2008-11-24 02:18:26 UTC  added:</i><br />
no way to escape @ in password when referencing a repository via url</div id="0fe7895629d6f18b">

<hr><div id="19dc52d77328989a"><i>On 2008-11-24 03:51:27 UTC anonymous (claiming to be rockshox) added:</i><br />
needs option to abort commit if comment file unchanged</div id="19dc52d77328989a">

<hr><div id="ba2f7abbe82c44f8"><i>On 2008-11-24 04:40:54 UTC anonymous added:</i><br />
wiki and bugs are not searchable. recommend fts3</div id="ba2f7abbe82c44f8">

<hr><div id="5497cbf3aac6f8ef"><i>On 2008-11-24 07:22:02 UTC anonymous added:</i><br />
file view needs download link next to view and annotate</div id="5497cbf3aac6f8ef">

<hr><div id="20924996b74bf57f"><i>On 2008-11-24 07:41:03 UTC anonymous added:</i><br />
make wiki edit textarea larger</div id="20924996b74bf57f">

<hr><div id="3ca727a272d2c757"><i>On 2008-11-24 07:51:56 UTC anonymous added:</i><br />
wiki page names are case sensitive and no way to rename a page</div id="3ca727a272d2c757">

<hr><div id="be13c1e2a2cf7e57"><i>On 2008-11-24 12:56:09 UTC drh added:</i><br />
The bug-tracking system of fossil works now.  Why not use that, rather than
appending remarks to a wiki page?</div id="be13c1e2a2cf7e57">

<hr><div id="8c53dc3095acacc8"><i>On 2008-11-25 00:23:09 UTC anonymous added:</i><br />
wiki links dont work right if name starts with id="8c53dc3095acacc8">