Comment 6 for bug 1369876

Revision history for this message
Matt Borland (palecrow) wrote :

Yeah, reference: https://docs.djangoproject.com/en/1.8/ref/settings/#csrf-cookie-secure ; I'm pretty sure that is the preferred method of dealing with cookie disclosure.