This was posted not to long ago, but I think it's absolutely fantastic. It's like restoring a classic ford pickup, but tossing in an AC unit and some new brakes.
I don't mean to undermine this powerful report but slavery is alive and growing across the planet. I think it's important to remember that there are higher percentages of slaves in the world now than there were back in the days the Western world considers the slave era. So, Mauritania is far from being the last stronghold. Al Jazeera and Rageh Omar produced an excellent series on modern day slavery.
That bit of CSRF javascript does not "ignore" CSRF checking, and is not unsafe. The only difference is that it sets the CSRF token value as a request header rather than a POST value. The browser still needs to have that CSRF cookie value.
Edit: Code backing from middleware/csrf.py:
request_csrf_token = request.POST.get('csrfmiddlewaretoken', '')
if request_csrf_token == "":
# Fall back to X-CSRFToken, to make things easier for AJAX
request_csrf_token = request.META.get('HTTP_X_CSRFTOKEN', '')
