Do bounds checking on numeric fields while parsing

Fixes #4 (closed)

This adds bounds checks to both capability string and URI extension block parsing.