custom HTTP header named X-XSRFToken or X-CSRFToken (the latter is accepted for compatibility with Django). See http://en.wikipedia.org/wiki/Cross-site_request_forgery Changed in version 3.2.2: Added support RequestHandlers and WSGI in the same server. Typical usage: wsgi_app = tornado.wsgi.WSGIContainer( django.core.handlers.wsgi.WSGIHandler()) application = tornado.web.Application([ (r"/foo", FooHandler), cookie-related RFCs (because browsers don’t either). The algorithm used is identical to that used by Django version 1.9.10. Added in version 4.4.2. 6.3.4 tornado.http1connection – HTTP/1.x client/server

custom HTTP header named X-XSRFToken or X-CSRFToken (the latter is accepted for compatibility with Django). See http://en.wikipedia.org/wiki/Cross-site_request_forgery Changed in version 3.2.2: Added support RequestHandlers and WSGI in the same server. Typical usage: wsgi_app = tornado.wsgi.WSGIContainer( django.core.handlers.wsgi.WSGIHandler()) application = tornado.web.Application([ (r"/foo", FooHandler) cookie-related RFCs (because browsers don’t either). The algorithm used is identical to that used by Django version 1.9.10. Added in version 4.4.2.Parameters:: tornado.http1connection – HTTP/1.x client/server