Yii view package version 4.0.0 was tagged.
CsrfInjection now injects a stringable CSRF object with methods getToken(), getParameterName(), getHeaderName() and hiddenInput() instead of string token to common parameters.