POST requests are only allowed via XHR (link. However, the validator still requires action and target to be set.

=> If this is the intended (no JS fallback) behavior, we should make this explicit in the documentation (and samples).
=> If this is not the intended behavior, we should update the validation rules.

//cc @mkhatib @Gregable

Context: PR #5548