def bare_xsrf(url, arg=None): return mark_safe(view_util.xsrf_for(url))
def form_xsrf(url, arg=None): x = view_util.xsrf_for(url) return mark_safe('<input type="hidden" name="xsrf" value="%s" />' % x)