The response are a redirect

XHRGET
http://webdev.local/master/index.php?r=questionAdministration/checkQuestionValidateTitle&sid=435438&qid=2445&code=Q00Copy
[HTTP/1.1 302 Found 6ms]

GET
    http://webdev.local/master/index.php?r=questionAdministration/checkQuestionValidateTitle&sid=435438&qid=2445&code=Q00Copy
État
302
Found
VersionHTTP/1.1
Transfert7,29 Ko (taille 19,06 Ko)
Politique de référentstrict-origin-when-cross-origin
Priorité de la requêteHighest
Résolution DNSSystème

    HTTP/1.1 302 Found

    Server: nginx/1.22.1

    Date: Fri, 22 Nov 2024 13:47:22 GMT

    Content-Type: text/html; charset=UTF-8

    Transfer-Encoding: chunked

    Connection: keep-alive

    Expires: Thu, 19 Nov 1981 08:52:00 GMT

    Cache-Control: no-store, no-cache, must-revalidate

    Pragma: no-cache

    Location: http://webdev.local/master/index.php?r=admin/authentication/sa/login

    Accept
        */*
    Accept-Encoding
        gzip, deflate
    Accept-Language
        fr-FR,fr;q=0.8,en-US;q=0.5,en;q=0.3
    Cache-Control
        no-cache
    Connection
        keep-alive
    Cookie
        KCFINDER_showname=on; KCFINDER_showsize=off; KCFINDER_showtime=off; KCFINDER_order=name; KCFINDER_orderDesc=off; KCFINDER_view=thumbs; KCFINDER_displaySettings=off; LS-QNDSYJGSASALCMYHZSKI=9qpskl98u8uiivaq5s5vfbp3sq; LS-NWVZOXQEDGKTPJFB=bmjck64jfav00skfg48o0mtg8q; YII_CSRF_TOKEN=eVBINk5zUVVubDdlSlZselk2ZHY0ZVVKSzRvTVNafmMRUzXi1FZGaXUkTe3r6g1CBANkAhIPX1zOlaYgQOGRpg%3D%3D
    DNT
        1
    Host
        webdev.local
    Pragma
        no-cache
    Priority
        u=0
    Referer
        http://webdev.local/master/index.php?r=questionAdministration/view&surveyid=435438&gid=265&qid=2445
    Sec-GPC
        1
    User-Agent
        Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
    X-Requested-With
        XMLHttpRequest

@DenisChenu, can you take this one?

@tibor.pacalat , @c_schmitz : the solution : send a 400 error if it's a POST request is OK (and it's not a login request) ?