mozilla/django-session-csrf — pull request #5 by scjody (2011-11-24 20:07:10+00:00)
Title: Enhancements and bugfixes to session-csrf

Hi all,

I've made several changes to session-csrf. The most visible ones in this pull request are:
* Add the ANON_ALWAYS setting. This makes session-csrf *always* set an anonymous CSRF cookie without requiring the @anonymous_csrf decorator, to make it work more like Django's existing CSRF functionality.
* Set a CSRF cookie when the CSRF token has been used. Even though session-csrf doesn't rely on the cookie for CSRF verification, it's useful for the cookie to be available so that web service APIs and AJAX requests can be CSRF protected without having to parse a form.

Cheers,
Jody