id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
16859	CSRF Improvements	Paul McMillan	Paul McMillan	"This is a ticket to keep track of general CSRF improvements we want to add to Django.

This includes:

 * #16010 - add Origin checking
 * Optionally tie CSRF to sessions
 * Use signing to improve CSRF (maybe with sessions)
 * Improve domain/host checking - deal with the subdomain to subdomain problem"	Cleanup/optimization	new	CSRF	1.3	Normal				Accepted	0	0	0	0	0	0