title: Django - This HTTPS site requires a Referer header
body: <p>I'm using Typeform to send a POST request to a Webhook on my server. 
  I'm looking at the sample request they give and it doesn't look like they are including a Referer header, so my Django site is blocking their request. </p>
  
  <p>Is there a way to whitelist their domain so that they can keep sending this without the referer? </p>
  
  <p>I know I could use csrf_exempt but that would not be ideal. </p>
  
  <p>I have the domain both in CSRF_TRUSTED_ORIGINS and CORS_ORIGIN_WHITELIST.</p>