django/django — pull request #1934 by KrzysiekJ (2013-11-18 16:33:21+00:00)
Title: Fixed #15619 – Added CSRF protection in logout view.

Logout in now performed only on POST requests.
GET requests return confirmation page.

Based on patches from ashchristopher and vzima.