fix(web): json_encode for REQUEST_URI enter in /reset-password

Ref: https://huntr.dev/bounties/75bd6901-5760-412d-96fc-b664e4644fea/

web/app/controllers/reset_pw.php

@@ -63,7 +63,7 @@ function validateResetPwPost() {
 		if (!validateResetPwPost()) {
 			return false;
 		}
-		$.post('<?=$_SERVER['REQUEST_URI']?>', {
+		$.post(json_encode(<?=$_SERVER['REQUEST_URI']?>), {
 			reset : '',
 			newPW : md5($('#input-password').val(), "<?= getPasswordClientSalt() ?>")
 		}, function(res) {