Index: openacs-4/packages/acs-api-browser/lib/search.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/lib/search.adp,v
diff -u -N -r1.7 -r1.7.2.1
--- openacs-4/packages/acs-api-browser/lib/search.adp	24 Jun 2015 19:10:41 -0000	1.7
+++ openacs-4/packages/acs-api-browser/lib/search.adp	22 May 2016 19:22:51 -0000	1.7.2.1
@@ -10,6 +10,7 @@
        <input type="text" name="query_string" value="@query_string@"><br>
        <input type="submit" value="All matches" name="search_type">
        <input type="submit" value="Only best match" name="search_type">
+       <if @::__csrf_token@ defined><input type="hidden" name="__csrf_token" value="@::__csrf_token;literal@"></if>
        </div>
        <p><a href="@openacs_browse_url@">Browse OpenACS Tcl API</a></p>
       </td>
@@ -66,6 +67,7 @@
     <h4>Tcl Documentation Search</h4>
     <div>
     <input type="text" name="tcl_proc">
+    <if @::__csrf_token@ defined><input type="hidden" name="__csrf_token" value="@::__csrf_token;literal@"></if>
     <input type="submit" value="Go"><br>
     (enter <em>exact</em> procedure name)<br>
     <a href="@tcl_docs_root@">Browse the Tcl documentation</a>
Index: openacs-4/packages/acs-api-browser/www/proc-search.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/proc-search.tcl,v
diff -u -N -r1.15.2.4 -r1.15.2.5
--- openacs-4/packages/acs-api-browser/www/proc-search.tcl	19 May 2016 06:30:28 -0000	1.15.2.4
+++ openacs-4/packages/acs-api-browser/www/proc-search.tcl	22 May 2016 19:22:51 -0000	1.15.2.5
@@ -30,6 +30,8 @@
     source_weight:onevalue
     query_string:onevalue
     results:multirow
+} -validate {
+    csrf { security::csrf::validate }
 }
 
 ##########################################################
Index: openacs-4/packages/acs-api-browser/www/tcl-doc-search.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/tcl-doc-search.adp,v
diff -u -N -r1.9 -r1.9.2.1
--- openacs-4/packages/acs-api-browser/www/tcl-doc-search.adp	3 Jul 2015 10:25:40 -0000	1.9
+++ openacs-4/packages/acs-api-browser/www/tcl-doc-search.adp	22 May 2016 19:22:51 -0000	1.9.2.1
@@ -13,9 +13,11 @@
 <table cellpadding="5">
   <tr>
     <td bgcolor="#dddddd">
-     <form action=tcl-doc-search method=get>
+     <form action="tcl-doc-search" method="get">
      <b>Tcl Documentation Search:</b><br>
-     <input type="text" name="tcl_proc" value="@tcl_proc@"> <input type="submit" value="Go"><br>
+     <input type="text" name="tcl_proc" value="@tcl_proc@">
+     <if @::__csrf_token@ defined><input type="hidden" name="__csrf_token" value="@::__csrf_token;literal@"></if>
+     <input type="submit" value="Go"><br>
      </form>
      </td>
   </tr>
Index: openacs-4/packages/acs-api-browser/www/tcl-doc-search.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/tcl-doc-search.tcl,v
diff -u -N -r1.8.2.1 -r1.8.2.2
--- openacs-4/packages/acs-api-browser/www/tcl-doc-search.tcl	10 Sep 2015 08:21:12 -0000	1.8.2.1
+++ openacs-4/packages/acs-api-browser/www/tcl-doc-search.tcl	22 May 2016 19:22:51 -0000	1.8.2.2
@@ -7,6 +7,8 @@
     title:onevalue
     context:onevalue
     tcl_proc:onevalue
+} -validate {
+    csrf { security::csrf::validate }
 }
 
 set tcl_docs_root "http://tcl.tk/man/tcl[info tclversion]/TclCmd/"
Index: openacs-4/packages/acs-api-browser/www/tcl-proc-view.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/tcl-proc-view.adp,v
diff -u -N -r1.11 -r1.11.2.1
--- openacs-4/packages/acs-api-browser/www/tcl-proc-view.adp	3 Jul 2015 10:25:40 -0000	1.11
+++ openacs-4/packages/acs-api-browser/www/tcl-proc-view.adp	22 May 2016 19:22:51 -0000	1.11.2.1
@@ -11,9 +11,11 @@
 <p>
 
 <div style="background: #dddddd; display: inline-block; padding: 5px;">
-     <form action=tcl-proc-view method=get>
+     <form action="tcl-proc-view" method="get">
      <div><b>Tcl Api Search:</b><br>
-     <input type="text" name="tcl_proc" value="@tcl_proc@"> <input type="submit" value="Go"><br>
+     <input type="text" name="tcl_proc" value="@tcl_proc@">
+     <!-- <if @::__csrf_token@ defined><input type="hidden" name="__csrf_token" value="@::__csrf_token;literal@"></if> -->
+     <input type="submit" value="Go"><br>
      </div>
      </form>
 </div>
\ No newline at end of file
Index: openacs-4/packages/acs-api-browser/www/tcl-proc-view.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/tcl-proc-view.tcl,v
diff -u -N -r1.10.2.2 -r1.10.2.3
--- openacs-4/packages/acs-api-browser/www/tcl-proc-view.tcl	13 May 2016 07:08:25 -0000	1.10.2.2
+++ openacs-4/packages/acs-api-browser/www/tcl-proc-view.tcl	22 May 2016 19:22:51 -0000	1.10.2.3
@@ -7,6 +7,8 @@
     title:onevalue
     context:onevalue
     tcl_proc:onevalue
+} -validate {
+    csrf { security::csrf::validate }    
 }
 
 set ns_api_index_result [util_memoize [list ::util::http::get -url $::apidoc::ns_api_html_index]]