Re:Security advisory: Breach and Django
by tptacek on Tuesday August 06, 2013 @11:59AM
(#6167327)
I'm sad that doesn't appear to exist.
[ Parent
| on HN ]
The parent said "as well" but I'm still insisting it referrer must not be neither a whole nor a part of CSRF protection.