Source

webwork / src / java / template / archive / simple / token.vm

Full commit
<input type="hidden" name="$!{parameters.tokenNameField}" value="$webwork.htmlEncode($!parameters.name)"/>
<input type="hidden" name="$!parameters.name" value="$webwork.htmlEncode($!parameters.token)"/>