Django CSRF cookie HttpOnly

Question

Is it possible to set the django csrf cookie to be http-only? Alike to SESSION_COOKIE_HTTPONLY with session cookie, but for the csrf one?

Answer 1

A new setting, CSRF_COOKIE_HTTPONLY, is available in Django 1.6+.