empêche les POST sur les demandes déjà validées (#24339)

src/authentic2_cut/views.py

@@ -215,6 +215,10 @@ class Validation(UserEditCoreView):
         return ctx
 
     def post(self, request, *args, **kwargs):
+        # POST is disabled on already validated requests
+        if self.validation_request.validated:
+            return self.get(request, *args, **kwargs)
+
         if 'refuse' in request.POST:
             reason = request.POST.get('reason')
             if not reason: