This advisory is pretty understandable, I think. The big bold text ("BREACH may be used to compromise Django's CSRF protection") is a strong warning of the thr

This advisory is pretty understandable, I think. The big bold text ("BREACH may be used to compromise Django's CSRF protection") is a strong warning of the threat (becoming vulnerable to XSS). They list two steps that they recommend taking; disable the gzip middleware in your settings.py, and disable gzip for responses from your web server.