django/django — pull request #114 by saschpe (2012-06-06 09:16:55+00:00)
Title: Add CSRF_COOKIE_HTTPONLY config value

Fixes #15808, even if there is also strict referer checking in place, better safe than sorry.