This procedure is defined in the server but not documented via ad_proc or proc_doc and may be intended as a private interface.
The procedure is defined as:
proc html::CSRFToken {} {
::if {[::info exists ::__csrf_token]} {
::html::input -type hidden -name __csrf_token -value $::__csrf_token {}
}
}