Index: openacs-4/packages/xowiki/tcl/folder-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/folder-procs.tcl,v
diff -u -r1.54 -r1.55
--- openacs-4/packages/xowiki/tcl/folder-procs.tcl	30 Jan 2019 13:49:18 -0000	1.54
+++ openacs-4/packages/xowiki/tcl/folder-procs.tcl	30 Jan 2019 20:25:16 -0000	1.55
@@ -562,7 +562,7 @@
     # We have to use the global variable for the time being due to
     # scoping in "-columns"
     set ::__xowiki_with_publish_status [expr {$publish_status ne "ready"}]
-    set ::__xowiki_folder_link [$package_id make_link $current_folder bulk-delete {__csrf_token [::security::csrf::token]}]
+    set ::__xowiki_folder_link [$package_id make_link $current_folder bulk-delete {__csrf_token $::__csrf_token}]
 
     switch [$package_id get_parameter PreferredCSSToolkit bootstrap] {
       bootstrap {set tableWidgetClass ::xowiki::BootstrapTable}
Index: openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl,v
diff -u -r1.69 -r1.70
--- openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl	17 Dec 2018 10:39:11 -0000	1.69
+++ openacs-4/packages/xotcl-core/tcl/30-widget-procs.tcl	30 Jan 2019 20:27:48 -0000	1.70
@@ -195,7 +195,7 @@
   namespace eval ::html {}
   proc ::html::CSRFToken {} {
     ::if {[::info exists ::__csrf_token]} {
-      ::html::input -type hidden -name __csrf_token -value [::security::csrf::token] {}
+      ::html::input -type hidden -name __csrf_token -value $::__csrf_token {}
     }
   }