Index: openacs-4/packages/xotcl-core/xotcl-core.info =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/xotcl-core.info,v diff -u -r1.92.2.13 -r1.92.2.14 --- openacs-4/packages/xotcl-core/xotcl-core.info 23 May 2016 16:39:57 -0000 1.92.2.13 +++ openacs-4/packages/xotcl-core/xotcl-core.info 25 May 2016 19:27:50 -0000 1.92.2.14 @@ -10,7 +10,7 @@ t xotcl - + Gustaf Neumann XOTcl library functionality (e.g. thread handling, online documentation, Generic Form and List Classes) 2016-02-13 @@ -48,7 +48,7 @@ BSD-Style 2 - + Index: openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl,v diff -u -r1.57.2.5 -r1.57.2.6 --- openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl 23 May 2016 16:39:57 -0000 1.57.2.5 +++ openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl 25 May 2016 19:27:50 -0000 1.57.2.6 @@ -189,7 +189,11 @@ foreach o [my children] { $o render } } - ::xo::tdom::Object instproc CSRFToken {} { + # + # General of HTML markup CSRF tokens in tdom contexts + # + namespace eval ::html {} + proc ::html::CSRFToken {} { if {[info exists ::__csrf_token]} { ::html::input -type hidden -name __csrf_token -value [set ::__csrf_token] {} } @@ -355,7 +359,7 @@ next my render_localizer } - + # # for the time being, just a proc # @@ -826,6 +830,7 @@ html::input -type checkbox -name __bulkaction \ -onclick "acs_ListCheckAll('$name', this.checked)" \ -title "Mark/Unmark all rows" + ::html::CSRFToken } } TABLE::BulkAction instproc render-data {line} {