jorgebastida/django-dajaxice — pull request #109 by raymondr (2013-06-26 19:40:35+00:00)
Title: Add DAJAXICE_FETCH_CSRF_FROM_FIELD in order to avoid reading CSRF cookie

A security recommendation is to mark all cookies httponly which disallows javascript from reading the cookies. This causes problems with dajaxice. This change adds a configuration option to pull the CSRF token from the form field rather than the cookie.