elevenbasetwo/django-cors — pull request #1 by moopet (2012-06-19 09:39:11+00:00)
Title: Add X-Requested-With

Tried to connect with Sencha Touch to a Django view, developing with Chromium revealed I needed to set
Access-Control-Allow-Headers: X-Requested-With

A few other people have noted this requirement (eg http://benbuckman.net/tech/12/04/cracking-cross-domainallow-origin-nut ) and it seems to do the job.