password reset mail empty

[selyod-ka]

Describe the bug
When using the password reset link on firefox, a mail is sent to the correct mail-address, but the mail is empty.

How to Reproduce

1. Go to 'https://openslides-domain.tld/login/forget-password
2. Enter mail-address, press button.
3. Mail is sent to the address.
4. The mail is empty; the subject reads as ": "

Expected behavior
The mail should contain a password-reset-link.

System information

• OpenSlides version: 4.1.14
• Browser: Firefox
• Browser version: 129.0.2

Additional context
With Brave (=Chromium 127) the mail sent contains a password reset link.

iiuc, the logs do not contain any useful information and they are the same for both password reset attempts (with firefox and with brave).

docker logs -f
[...]
backendAction-1     | INFO:openslides_backend.shared.handlers.base_handler:Performing action user.forget_password.
auth-1              | 2024-09-03T11:28:01.601Z http://auth:9004: POST -- /internal/auth/create-authorization-token
datastoreWriter-1   | [2024-09-03 11:28:01 +0000] [22] [INFO] Created position 22
datastoreWriter-1   | [2024-09-03 11:28:01 +0000] [22] [INFO] Events executed (1 UPDATE)
datastoreWriter-1   | [2024-09-03 11:28:01 +0000] [22] [INFO] UPDATE: ['user/3']
backendAction-1     | INFO:openslides_backend.shared.handlers.base_handler:Request was successful. Send response now.
[...]

[selyod-ka]

i can reproduce the issue in the demo instance.
this is the (redacted: my mail-adress) complete raw mail:

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from proxy02.example.com ([127.0.0.1])
	by dovecot03.example.com (Dovecot) with LMTP id 41n4OYT51mahRAEAVYRftg
	for <[email protected]>; Tue, 03 Sep 2024 14:05:56 +0200
Received: from proxy02.example.com ([127.0.0.1])
	by proxy02.example.com (Dovecot) with LMTP id kJ5qNbD61mYDCAIAGFAyLg
	; Tue, 03 Sep 2024 14:05:56 +0200
Received: from mailin06.example.com (unknown [10.0.1.6])
	by proxy02.example.com (Postfix) with ESMTPS id 4Wykq83T53z12Q2
	for <[email protected]>; Tue,  3 Sep 2024 14:05:56 +0200 (CEST)
Received: from mx04.example.com (mailin06.example.com [127.0.0.1])
	by mailin06.example.com (Postfix) with ESMTPS id 0DCF321C39
	for <[email protected]>; Tue,  3 Sep 2024 14:05:55 +0200 (CEST)
X-Virus-Scanned: amavisd-new at example.com
X-Spam-Status: v=1; e=base64; a=aes-256-gcm;
 d=hZ9fkOgSUxjfk+gfsuyq3Y3uLbzxprEXFSRSxopMgNv7zOsNPjEmyao8ewrScUBAjiDne9YRF
 TkZHYzdN8TUB3aflZuKKWu0OLnQg6JsLsTh7I+USVvmavBjG06eat3SFevqmdwN8QeWB5/pqgps
 +wd+iF++BAokQ2jv4sI2n43VR9cBxARhZS3Fh66mAZIuWj/k2h041FQIdNavPAo/fSff6WQ/Slv
 T/ikUZejyH+HiABuxO7EOHLwQR6NvzyLbJAOgUDxJEQZ07W/GF1i3w96M9bqL47xZrivi6OC1jr
 qUKAdXtbN6Pk6Yw+2wA+GMKVfhF7rJMbB3RZXOlyF3pxONfjUycihnggxPope0YLCLgyTB8zEnl
 hr/J1aRL5QW+jy/hXcNyHOkI84rhSISyMzd4yspe+y52wDTVdF9uzol4JgNpe/a6DqONf1I94HY
 vuo6qezB9707tL439NZfJ3TT9v6FzxCJ
Authentication-Results: example.com; dmarc=pass (p=none dis=none) header.from=openslides.com
Authentication-Results: example.com; spf=pass smtp.mailfrom=openslides.com
X-TLS-Received-Status: TLSv1.3
Authentication-Results: example.com;
	dkim=pass (2048-bit key) header.d=openslides.com [email protected] header.b=ghgAoc4m;
	dkim-atps=neutral
Received: from mail.openslides.com (mail.openslides.com [136.243.0.249])
	by mx04.example.com (Postfix) with ESMTPS id 4WykpY5wwHzymN
	for <[email protected]>; Tue,  3 Sep 2024 14:05:25 +0200 (CEST)
Received: from [192.168.208.15] (openslides-cloud3.intevation.de [176.9.30.134])
	by mail.openslides.com (Postfix) with ESMTPS id 764518026F
	for <[email protected]>; Tue,  3 Sep 2024 14:05:16 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=openslides.com;
	s=201904; t=1725365116;
	bh=frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=;
	h=From:To:Subject:Date:From;
	b=ghgAoc4mCJ2QhgUIEpo7zvj649KXuRhu01Bedzifgl8bZRGqW4UeIDoR5vPZmBC+4
	 lw4euRkX5rAQSlqbsxcniVes5ukJg1a3pI+TKRDyTpy9IuP6g0mFMeAnpONlN9rmOe
	 d1qUJWfAhYn1F/UTJNRZ+JxB0U45QYg7E5Ed0YRW69gR0Flb0XSIpg2DJnbJ7pp7K4
	 ggKRVUYNVUZ4Fr+ET4ItvVcurn66ODCJbeRnjA0cUbuuiAPwFAPhAnl8fIjJhFscjj
	 MwRzFX2m5A3FGDUo9exBe52tWslL/mBfnsw6b5WM8Wqbs9yhsAClEHztjsLMH78WkA
	 ZXZdgfVnORniw==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
From: [email protected]
To: [email protected]
Subject: : [email protected]
Date: Tue, 03 Sep 2024 12:05:16 -0000
Message-ID: <[email protected]>

[Elblinator]

Can you please send the requests from your firefox and brave
The action in the requests should be user.forget_password