Index: openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl,v
diff -u -r1.11.2.5 -r1.11.2.6
--- openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl	13 Aug 2019 15:40:46 -0000	1.11.2.5
+++ openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl	13 Aug 2019 15:46:06 -0000	1.11.2.6
@@ -150,7 +150,7 @@
       }
 
   BootstrapNavbarDropzone instproc js {-uploadlink:required} {
-    html::script -type "text/javascript" -nonce $::__csp_nonce {
+    html::script -type "text/javascript" -nonce [security::csp::nonce] {
       html::t [subst -nocommands {
         + function($) {
           'use strict';
@@ -281,7 +281,7 @@
     # In the current implementation, the page refreshes itself after
     # successful mode change. This could be made configurable.
     #
-    html::script -type "text/javascript" -nonce $::__csp_nonce {
+    html::script -type "text/javascript" -nonce [security::csp::nonce] {
       html::t {
         function mode_button_ajax_submit(form) {
           $.ajax({