From 5d18a7466c0b08aa91930e4076d799769cb5471c Mon Sep 17 00:00:00 2001
From: Mikhail Devyatov <superhacker777@yandex.ru>
Date: Tue, 27 Oct 2015 20:16:47 +0300
Subject: [PATCH] XSRFFormHtml() should also generate XSRF token.

---
 controller.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/controller.go b/controller.go
index 7fbf6dc5..0750daf4 100644
--- a/controller.go
+++ b/controller.go
@@ -647,8 +647,8 @@ func (c *Controller) CheckXSRFCookie() bool {
 
 // XSRFFormHTML writes an input field contains xsrf token value.
 func (c *Controller) XSRFFormHTML() string {
-	return "<input type=\"hidden\" name=\"_xsrf\" value=\"" +
-		c._xsrfToken + "\"/>"
+	return `<input type="hidden" name="_xsrf" value="` +
+		c.XSRFToken() + `" />`
 }
 
 // GetControllerAndAction gets the executing controller name and action name.