scjody/django-session-csrf — comment on commit 4b92d9d2c6fd6faeb3c35b3b7766272b4cffa4e9
File:  line 0
By jbalogh:

I think I'm uneasy because this exposes a value we know we can't trust, so it could lead to developer confusion without providing a lot of benefit.

It should be possible to do this for your own app by adding another piece of middleware (if it's not we can fix that), but I don't want to put this in the default distribution.