400 - Bad Referer header

Checklist

• I confirm that this is an issue with aurweb's code and not a user-uploaded package.
• I have described the bug in complete detail in the Description section.
• I have specified steps in the Reproduction section.
• I have included any logs related to the bug in the Logs section.
• I have included the versions which are affected in the Version(s) section.

Description

Disabling referer headers in browser breaks aurweb login, and redirects to 400 page saying Bad Referer header

Reproduction

1. Open firefox and set config network.http.sendRefererHeader=0
2. Go to https://aur.archlinux.org/login
3. Attempt to login

Logs

N/A

Version(s)

aurweb v6.0.19 

This bug is caused by the "CSRF" handling using the Referer header 020409ef see the DJango bugtracker for a similiar issue https://code.djangoproject.com/ticket/16870

Just want to give an update that this issue is still occurring.

@t3pfaffe I believe this is handled by !518 (merged) related to #351 (closed) and incoming soon (TM).

added scopebug label

This should be fixed. Reopen if not the case.

closed