Nette\Forms\Controls\CsrfProtection::getToken PHP Method

    public function getToken()
    {
        $session = $this->getSession()->getSection(__CLASS__);
        if (!isset($session->token)) {
            $session->token = Nette\Utils\Random::generate();
        }
        return $session->token ^ $this->getSession()->getId();
    }

 /**
  * @return bool
  */
 public static function validateCsrf(CsrfProtection $control)
 {
     return $control->getValue() === $control->getToken();
 }