<p>Using Django? Be careful with custom values for <code><meta name="referrer"></code>! Yes, a HTML tag can break Django CSRF protection: (PS: note old browsers might misbehave with new <code><meta name="referrer"></code> values too! Better avoid it.)</p>
By clicking “Accept all”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage and assist in our marketing efforts. Check our privacy policies.