[1.1.X] Fixed a security issue in the CSRF component. Disclosure and new release forthcoming.

      git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@15466 bcc190cf-cafb-0310-a4f2-bffc1f526a37