django/django — pull request #331 by davidfischer (2012-09-06 20:16:16+00:00)
Title: Ticket #17324 - Improve security docs with better CSRF explanation

See https://code.djangoproject.com/ticket/17324

I added Paul's notes from the Django developers thread into the security documentation as well as a specific recommendation about HSTS in the SSL section.