Hello Stefan,
Indeed: it seems to be an infinite loop containing a javascript call !
Here is a screen capture of an firefox console:
.
Here is request text (with hidden URL):
POST /egroupware/json.php?menuaction=api.queue HTTP/1.1
Host: hidden_url.domain.tld
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: fr-FR,es-AR;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://hidden_url.domain.tld/egroupware/index.php?cd=yes
Content-Type: application/json
Content-Length: 120
Origin: https://hidden_url.domain.tld
DNT: 1
Connection: keep-alive
Cookie: rl_anonymous_id=%22c6aa4b0a-0f01-4936-b802-65b1d71d6c75%22; rl_user_id=%22%22; last_loginid=postmaster; last_domain=default; eGW_cookie_test=enabled; sessionid=oc55fdapkl1m6pud850eophqg6; kp3=8XYxo8gDrqA9TKxkCrSPRWKt; domain=default
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
And here is response text (same: URL is hidden):
HTTP/1.1 200 OK
server: nginx/1.18.0
date: Mon, 30 Oct 2023 14:26:22 GMT
content-type: application/json; charset=utf-8
transfer-encoding: chunked
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding