Sure Thing!
Naturally it fails due to the fact the the scheme of the host is hardcoded to 'https'(django/middleware/csrf.py:147):
    good_referer = 'https://%s/' % request.get_host()

But I'm beginning to think my suggested patch might be a bad idea.. Reason being that the port of HTTP_HOST of the request in my particular case is not set by the browser but by a less competent gateway, a man-in-the-middle if you will.