fix(web): json_encode for REQUEST_URI enter in /reset-password

Ref: https://huntr.dev/bounties/75bd6901-5760-412d-96fc-b664e4644fea/
UniversalOJ · Sep 9, 2021 · e357d1c · e357d1c
1 parent ebf541a
commit e357d1c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/app/controllers/reset_pw.php b/web/app/controllers/reset_pw.php
@@ -63,7 +63,7 @@ function validateResetPwPost() {
 		if (!validateResetPwPost()) {
 			return false;
 		}
-		$.post('<?=$_SERVER['REQUEST_URI']?>', {
+		$.post(json_encode(<?=$_SERVER['REQUEST_URI']?>), {
 			reset : '',
 			newPW : md5($('#input-password').val(), "<?= getPasswordClientSalt() ?>")
 		}, function(res) {