Index: openacs-4/packages/acs-tcl/tcl/security-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/security-procs.tcl,v diff -u -r1.126.2.34 -r1.126.2.35 --- openacs-4/packages/acs-tcl/tcl/security-procs.tcl 21 Jul 2020 14:02:09 -0000 1.126.2.34 +++ openacs-4/packages/acs-tcl/tcl/security-procs.tcl 8 Aug 2020 11:19:23 -0000 1.126.2.35 @@ -2816,7 +2816,7 @@ The optional argument user_id is currently ignored, but it is there, since there are algorithms published to calculate the - CSRF token based on an user_id. So far, i found no evidence + CSRF token based on a user_id. So far, i found no evidence that these should be used, but the argument is there as a reminder, such the interface does not have to be used, when we switch to such an algorithm.