middleman-core 3.2.0 → 3.2.1

data/lib/vendored-middleman-deps/{padrino-helpers-0.11.2 → padrino-helpers-0.11.4}/lib/padrino-helpers/form_builder/standard_form_builder.rb

@@ -2,9 +2,8 @@ require File.expand_path(File.dirname(__FILE__) + '/abstract_form_builder') unle
 
 module Padrino
   module Helpers
-    module FormBuilder # @private
-      class StandardFormBuilder < AbstractFormBuilder # @private
-
+    module FormBuilder
+      class StandardFormBuilder < AbstractFormBuilder
         ##
         # StandardFormBuilder
         #
@@ -26,18 +25,16 @@ module Padrino
           EOF
         end
 
-        # submit_block("Update")
         def submit_block(caption, options={})
           submit_html = self.submit(caption, options)
           @template.content_tag(:p, submit_html)
         end
 
-        # image_submit_block("submit.png")
         def image_submit_block(source, options={})
           submit_html = self.image_submit(source, options)
           @template.content_tag(:p, submit_html)
         end
-      end # StandardFormBuilder
-    end # FormBuilder
-  end # Helpers
-end # Padrino
+      end
+    end
+  end
+end

data/lib/vendored-middleman-deps/{padrino-helpers-0.11.2 → padrino-helpers-0.11.4}/lib/padrino-helpers/form_helpers.rb

@@ -7,14 +7,16 @@ module Padrino
     #
     module FormHelpers
       ##
-      # Constructs a form for object using given or default form_builder
+      # Constructs a form for object using given or default form_builder.
       #
       # @param [Object] object
       #   The object for which the form is being built.
-      # @param [String] url
+      # @param [String] URL
       #   The url this form will submit to.
       # @param [Hash] settings
-      #   The settings associated with this form. Accepts html options.
+      #   The settings associated with this form.
+      #   Accepts a :namespace option that will be prepended to the id attributes of the form's elements.
+      #   Also accepts HTML options.
       # @option settings [String] :builder ("StandardFormBuilder")
       #   The FormBuilder class to use such as StandardFormBuilder.
       # @param [Proc] block
@@ -28,21 +30,22 @@ module Padrino
       #   form_for :user, '/register' do |f| ... end
       #   form_for @user, '/register', :id => 'register' do |f| ... end
       #
-      # @api public
       def form_for(object, url, settings={}, &block)
         instance = builder_instance(object, settings)
         html = capture_html(instance, &block)
+        settings[:multipart] = instance.multipart unless settings.include?(:multipart)
+        settings.delete(:namespace)
         form_tag(url, settings) { html }
       end
 
       ##
-      # Constructs form fields for an object using given or default form_builder
-      # Used within an existing form to allow alternate objects within one form
+      # Constructs form fields for an object using given or default form_builder.
+      # Used within an existing form to allow alternate objects within one form.
       #
       # @param [Object] object
       #   The object for which the fields are being built.
       # @param [Hash] settings
-      #   The settings associated with these fields. Accepts html options.
+      #   The settings associated with these fields. Accepts HTML options.
       # @param [Proc] block
       #   The content inside this set of fields.
       #
@@ -52,7 +55,6 @@ module Padrino
       #   fields_for @user.assignment do |assignment| ... end
       #   fields_for :assignment do |assigment| ... end
       #
-      # @api public
       def fields_for(object, settings={}, &block)
         instance = builder_instance(object, settings)
         fields_html = capture_html(instance, &block)
@@ -61,40 +63,45 @@ module Padrino
       end
 
       ##
-      # Constructs a form without object based on options
+      # Constructs a form without object based on options.
       #
       # @param [String] url
-      #   The url this form will submit to.
+      #   The URL this form will submit to.
       # @param [Hash] options
       #   The html options associated with this form.
       # @param [Proc] block
       #   The fields and content inside this form.
       #
-      # @return [String] The html form with the specified options and input fields.
+      # @return [String] The HTML form with the specified options and input fields.
       #
       # @example
       #   form_tag '/register', :class => "registration_form" do ... end
       #
-      # @api public
       def form_tag(url, options={}, &block)
         desired_method = options[:method].to_s
         options.delete(:method) unless desired_method =~ /get|post/i
-        options.reverse_merge!(:method => 'post', :action => url)
+        options.reverse_merge!(:method => 'post',
+                               :action => url,
+                               :protect_from_csrf => is_protected_from_csrf? )
         options[:enctype] = 'multipart/form-data' if options.delete(:multipart)
         options['accept-charset'] ||= 'UTF-8'
         inner_form_html = hidden_form_method_field(desired_method)
-        inner_form_html << csrf_token_field
+        if options[:protect_from_csrf] == true && !(desired_method =~ /get/i)
+          inner_form_html << csrf_token_field
+        end
         inner_form_html << mark_safe(capture_html(&block))
-        concat_content content_tag(:form, inner_form_html, options)
+        not_concat = options.delete(:not_concat)
+        form_html  = content_tag(:form, inner_form_html, options)
+        not_concat ? form_html : concat_content(form_html)
       end
 
       ##
-      # Returns the hidden method field for 'put' and 'delete' forms
+      # Returns the hidden method field for 'put' and 'delete' forms.
       # Only 'get' and 'post' are allowed within browsers;
       # 'put' and 'delete' are just specified using hidden fields with form action still 'put'.
       #
       # @param [String] desired_method
-      #   The method this hidden field represents (i.e put or delete))
+      #   The method this hidden field represents (i.e put or delete).
       #
       # @return [String] The hidden field representing the +desired_method+ for the form.
       #
@@ -102,14 +109,13 @@ module Padrino
       #   # Generate: <input name="_method" value="delete" />
       #   hidden_form_method_field('delete')
       #
-      # @api semipublic
       def hidden_form_method_field(desired_method)
         return ActiveSupport::SafeBuffer.new if desired_method.blank? || desired_method.to_s =~ /get|post/i
         hidden_field_tag(:_method, :value => desired_method)
       end
 
       ##
-      # Constructs a field_set to group fields with given options
+      # Constructs a field_set to group fields with given options.
       #
       # @overload field_set_tag(legend=nil, options={}, &block)
       #   @param [String] legend  The legend caption for the fieldset
@@ -125,7 +131,6 @@ module Padrino
       #   field_set_tag(:class => "office-set") { }
       #   field_set_tag("Office", :class => 'office-set') { }
       #
-      # @api public
       def field_set_tag(*args, &block)
         options = args.extract_options!
         legend_text = args[0].is_a?(String) ? args.first : nil
@@ -135,13 +140,13 @@ module Padrino
       end
 
       ##
-      # Constructs list html for the errors for a given symbol
+      # Constructs list HTML for the errors for a given symbol.
       #
       # @overload error_messages_for(*objects, options = {})
       #   @param [Array<Object>]  object   Splat of objects to display errors for.
       #   @param [Hash]           options  Error message display options.
       #   @option options [String] :header_tag ("h2")
-      #     Used for the header of the error div
+      #     Used for the header of the error div.
       #   @option options [String] :id ("field-errors")
       #     The id of the error div.
       #   @option options [String] :class ("field-errors")
@@ -153,7 +158,7 @@ module Padrino
       #     The object name to use in the header, or any text that you prefer.
       #     If +:object_name+ is not set, the name of the first object will be used.
       #   @option options [String] :header_message ("X errors prohibited this object from being saved")
-      #     The message in the header of the error div.  Pass +nil+ or an empty string
+      #     The message in the header of the error div. Pass +nil+ or an empty string
       #     to avoid the header message altogether.
       #   @option options [String] :message ("There were problems with the following fields:")
       #     The explanation message after the header message and before
@@ -165,7 +170,6 @@ module Padrino
       # @example
       #   error_messages_for :user
       #
-      # @api public
       def error_messages_for(*objects)
         options = objects.extract_options!.symbolize_keys
         objects = objects.map { |object_name|
@@ -184,19 +188,19 @@ module Padrino
             end
           end
 
-          options[:object_name] ||= objects.first.class
+          options[:object_name] ||= objects.first.class.to_s.underscore.gsub(/\//, ' ')
 
           I18n.with_options :locale => options[:locale], :scope => [:models, :errors, :template] do |locale|
             header_message = if options.include?(:header_message)
               options[:header_message]
             else
-              object_name = options[:object_name].to_s.underscore.gsub(/\//, ' ')
+              object_name = options[:object_name]
               object_name = I18n.t(:name, :default => object_name.humanize, :scope => [:models, object_name], :count => 1)
               locale.t :header, :count => count, :model => object_name
             end
             message = options.include?(:message) ? options[:message] : locale.t(:body)
             error_messages = objects.map { |object|
-              object_name = options[:object_name].to_s.underscore.gsub(/\//, ' ')
+              object_name = options[:object_name]
               object.errors.map { |f, msg|
                 field = I18n.t(f, :default => f.to_s.humanize, :scope => [:models, object_name, :attributes])
                 content_tag(:li, "%s %s" % [field, msg])
@@ -216,7 +220,8 @@ module Padrino
       end
 
       ##
-      # Returns a string containing the error message attached to the +method+ on the +object+ if one exists.
+      # Returns a string containing the error message attached to the
+      # +method+ on the +object+ if one exists.
       #
       # @param [Object] object
       #   The object to display the error for.
@@ -251,8 +256,8 @@ module Padrino
         error = if defined?(Ohm::Model) && object.is_a?(Ohm::Model)
           I18n.t("ohm.errors.messages.#{error[0]}", :default => error[0].to_s)
         else
-          # Array(error).first is necessary because some ORMs 
-          # give us an array others directly a value
+          # Array(error).first is necessary because some ORMs
+          # give us an array others directly a value.
           Array(error)[0]
         end
 
@@ -267,7 +272,7 @@ module Padrino
       end
 
       ##
-      # Constructs a label tag from the given options
+      # Constructs a label tag from the given options.
       #
       # @param [String] name
       #   The name of the field to label.
@@ -284,7 +289,6 @@ module Padrino
       #   label_tag :username, :class => 'long-label'
       #   label_tag :username, :class => 'long-label' do ... end
       #
-      # @api public
       def label_tag(name, options={}, &block)
         options.reverse_merge!(:caption => "#{name.to_s.humanize}: ", :for => name)
         caption_text = options.delete(:caption).html_safe
@@ -299,7 +303,7 @@ module Padrino
       end
 
       ##
-      # Creates a text field input with the given name and options
+      # Creates a text field input with the given name and options.
       #
       # @macro [new] text_field
       #   @param [Symbol] name
@@ -328,40 +332,39 @@ module Padrino
       #   @option options [Boolean] :spellcheck
       #     Specifies whether or not the field should have it's spelling and grammar checked for errors.
       #   @option options [Boolean] :draggable
-      #     Specifies whether or not the field is draggable. (true, false, :auto)
+      #     Specifies whether or not the field is draggable. (true, false, :auto).
       #   @option options [String] :pattern
       #     Specifies the regular expression pattern that the field's value is checked against.
       #   @option options [Symbol] :autocomplete
-      #     Specifies whether or not the field should have autocomplete enabled. (:on, :off)
+      #     Specifies whether or not the field should have autocomplete enabled. (:on, :off).
       #   @option options [Boolean] :autofocus
       #     Specifies whether or not the field should automatically get focus when the page loads.
       #   @option options [Boolean] :required
-      #     Specifies whether or not the field is required to be completeled before the form is submitted.
+      #     Specifies whether or not the field is required to be completed before the form is submitted.
       #   @option options [Boolean] :readonly
       #     Specifies whether or not the field is read only.
       #   @option options [Boolean] :disabled
       #     Specifies whether or not the field is disabled.
       #
       #   @return [String]
-      #     Generated HTML with specified +options+
+      #     Generated HTML with specified +options+.
       #
       # @example
       #   text_field_tag :first_name, :maxlength => 40, :required => true
-      #   # => <input name="first_name" maxlength="40" required type="text">
+      #   # => <input name="first_name" maxlength="40" required type="text" />
       #
       #   text_field_tag :last_name, :class => 'string', :size => 40
-      #   # => <input name="last_name" class="string" size="40" type="text">
+      #   # => <input name="last_name" class="string" size="40" type="text" />
       #
       #   text_field_tag :username, :placeholder => 'Your Username'
-      #   # => <input name="username" placeholder="Your Username" type="text">
+      #   # => <input name="username" placeholder="Your Username" type="text" />
       #
-      # @api public
       def text_field_tag(name, options={})
         input_tag(:text, options.reverse_merge!(:name => name))
       end
 
       ##
-      # Creates a number field input with the given name and options
+      # Creates a number field input with the given name and options.
       #
       # @macro [new] number_field
       #   @param [Symbol] name
@@ -390,11 +393,11 @@ module Padrino
       #   @option options [Boolean] :spellcheck
       #     Specifies whether or not the field should have it's spelling and grammar checked for errors.
       #   @option options [Boolean] :draggable
-      #     Specifies whether or not the field is draggable. (true, false, :auto)
+      #     Specifies whether or not the field is draggable. (true, false, :auto).
       #   @option options [String] :pattern
       #     Specifies the regular expression pattern that the field's value is checked against.
       #   @option options [Symbol] :autocomplete
-      #     Specifies whether or not the field should have autocomplete enabled. (:on, :off)
+      #     Specifies whether or not the field should have autocomplete enabled. (:on, :off).
       #   @option options [Boolean] :autofocus
       #     Specifies whether or not the field should automatically get focus when the page loads.
       #   @option options [Boolean] :required
@@ -405,138 +408,125 @@ module Padrino
       #     Specifies whether or not the field is disabled.
       #
       #   @return [String]
-      #     Generated HTML with specified +options+
+      #     Generated HTML with specified +options+.
       #
       # @example
-      #   number_field_tag :quanity, :class => 'numeric'
-      #   # => <input name="quanity" class="numeric" type="number">
+      #   number_field_tag :quantity, :class => 'numeric'
+      #   # => <input name="quantity" class="numeric" type="number" />
       #
       #   number_field_tag :zip_code, :pattern => /[0-9]{5}/
-      #   # => <input name="zip_code" pattern="[0-9]{5}" type="number">
+      #   # => <input name="zip_code" pattern="[0-9]{5}" type="number" />
       #
       #   number_field_tag :credit_card, :autocomplete => :off
-      #   # => <input name="credit_card" autocomplete="off" type="number">
+      #   # => <input name="credit_card" autocomplete="off" type="number" />
       #
       #   number_field_tag :age, :min => 18, :max => 120, :step => 1
-      #   # => <input name="age" min="18" max="120" step="1" type="number">
+      #   # => <input name="age" min="18" max="120" step="1" type="number" />
       #
-      # @api public
       def number_field_tag(name, options={})
         input_tag(:number, options.reverse_merge(:name => name))
       end
 
       ##
-      # Creates a telephone field input with the given name and options
+      # Creates a telephone field input with the given name and options.
       #
       # @macro text_field
       #
       # @example
       #   telephone_field_tag :phone_number, :class => 'string'
-      #   # => <input name="phone_number" class="string" type="tel">
+      #   # => <input name="phone_number" class="string" type="tel" />
       #
       #  telephone_field_tag :cell_phone, :tabindex => 1
       #  telephone_field_tag :work_phone, :tabindex => 2
       #  telephone_field_tag :home_phone, :tabindex => 3
       #
-      #  # => <input name="cell_phone" tabindex="1" type="tel">
-      #  # => <input name="work_phone" tabindex="2" type="tel">
-      #  # => <input name="home_phone" tabindex="3" type="tel">
+      #  # => <input name="cell_phone" tabindex="1" type="tel" />
+      #  # => <input name="work_phone" tabindex="2" type="tel" />
+      #  # => <input name="home_phone" tabindex="3" type="tel" />
       #
-      # @api public
       def telephone_field_tag(name, options={})
         input_tag(:tel, options.reverse_merge(:name => name))
       end
       alias_method :phone_field_tag, :telephone_field_tag
 
       ##
-      # Creates an email field input with the given name and options
+      # Creates an email field input with the given name and options.
       #
       # @macro text_field
       #
       # @example
       #   email_field_tag :email, :placeholder => 'you@example.com'
-      #   # => <input name="email" placeholder="you@example.com" type="email">
+      #   # => <input name="email" placeholder="you@example.com" type="email" />
       #
       #   email_field_tag :email, :value => 'padrinorb@gmail.com', :readonly => true
-      #   # => <input name="email" value="padrinorb@gmail.com" readonly type="email">
+      #   # => <input name="email" value="padrinorb@gmail.com" readonly type="email" />
       #
-      # @api public
       def email_field_tag(name, options={})
         input_tag(:email, options.reverse_merge(:name => name))
       end
 
       ##
-      # Creates a search field input with the given name and options
+      # Creates a search field input with the given name and options.
       #
       # @macro text_field
       #
       # @example
       #  search_field_tag :search, :placeholder => 'Search this website...'
-      #  # => <input name="search" placeholder="Search this website..." type="search">
+      #  # => <input name="search" placeholder="Search this website..." type="search" />
       #
       #  search_field_tag :search, :maxlength => 15, :class => ['search', 'string']
-      #  # => <input name="search" maxlength="15" class="search string">
+      #  # => <input name="search" maxlength="15" class="search string" />
       #
       #  search_field_tag :search, :id => 'search'
-      #  # => <input name="search" id="search" type="search">
+      #  # => <input name="search" id="search" type="search" />
       #
       #  search_field_tag :search, :autofocus => true
-      #  # => <input name="search" autofocus type="search">
+      #  # => <input name="search" autofocus type="search" />
       #
-      # @api public
       def search_field_tag(name, options={})
         input_tag(:search, options.reverse_merge(:name => name))
       end
 
       ##
-      # Creates a url field input with the given name and options
+      # Creates a URL field input with the given name and options.
       #
       # @macro text_field
       #
       # @example
       #  url_field_tag :favorite_website, :placeholder => 'http://padrinorb.com'
-      #  <input name="favorite_website" placeholder="http://padrinorb.com." type="url">
+      #  <input name="favorite_website" placeholder="http://padrinorb.com." type="url" />
       #
       #  url_field_tag :home_page, :class => 'string url'
-      #  <input name="home_page" class="string url", type="url">
+      #  <input name="home_page" class="string url", type="url" />
       #
-      # @api public
       def url_field_tag(name, options={})
         input_tag(:url, options.reverse_merge(:name => name))
       end
 
       ##
-      # Constructs a hidden field input from the given options
-      #
-      # @macro text_field
+      # Constructs a hidden field input from the given options.
       #
       # @example
       #   hidden_field_tag :session_key, :value => "__secret__"
       #
-      # @api public
       def hidden_field_tag(name, options={})
         options.reverse_merge!(:name => name)
         input_tag(:hidden, options)
       end
 
       ##
-      # Constructs a text area input from the given options
-      #
-      # @macro text_field
+      # Constructs a text area input from the given options.
       #
       # @example
       #   text_area_tag :username, :class => 'long', :value => "Demo?"
       #
-      # @api public
       def text_area_tag(name, options={})
         options.reverse_merge!(:name => name, :rows => "", :cols => "")
         content_tag(:textarea, options.delete(:value).to_s, options)
       end
 
       ##
-      # Constructs a password field input from the given options
-      #
-      # @macro text_field
+      # Constructs a password field input from the given options.
       #
       # @example
       #   password_field_tag :password, :class => 'long'
@@ -548,37 +538,29 @@ module Padrino
       end
 
       ##
-      # Constructs a check_box from the given options
-      #
-      # @macro text_field
+      # Constructs a check_box from the given options.
       #
       # @example
       #   check_box_tag :remember_me, :value => 'Yes'
       #
-      # @api public
       def check_box_tag(name, options={})
         options.reverse_merge!(:name => name, :value => '1')
         input_tag(:checkbox, options)
       end
 
       ##
-      # Constructs a radio_button from the given options
-      #
-      # @macro text_field
+      # Constructs a radio_button from the given options.
       #
       # @example
       #   radio_button_tag :remember_me, :value => 'true'
       #
-      # @api public
       def radio_button_tag(name, options={})
         options.reverse_merge!(:name => name)
         input_tag(:radio, options)
       end
 
       ##
-      # Constructs a file field input from the given options
-      #
-      # @macro text_field
+      # Constructs a file field input from the given options.
       #
       # @example
       #   file_field_tag :photo, :class => 'long'
@@ -591,7 +573,7 @@ module Padrino
       end
 
       ##
-      # Constructs a select from the given options
+      # Constructs a select from the given options.
       #
       # @example
       #   options = [['caption', 'value'], ['Green', 'green1'], ['Blue', 'blue1'], ['Black', "black1"]]
@@ -628,9 +610,8 @@ module Padrino
       # @option options [Boolean] :multiple (false)
       #   Allow multiple options to be selected at once.
       #
-      # @return [String] The html input field based on the +options+ specified
+      # @return [String] The HTML input field based on the +options+ specified.
       #
-      # @api public
       def select_tag(name, options={})
         options.reverse_merge!(:name => name)
         collection, fields = options.delete(:collection), options.delete(:fields)
@@ -647,7 +628,7 @@ module Padrino
       end
 
       ##
-      # Constructs a button input from the given options
+      # Constructs a button input from the given options.
       #
       # @param [String] caption
       #   The caption for the button.
@@ -659,16 +640,15 @@ module Padrino
       # @example
       #   button_tag "Cancel", :class => 'clear'
       #
-      # @api public
       def button_tag(caption, options = {})
         options.reverse_merge!(:value => caption)
         input_tag(:button, options)
       end
 
       ##
-      # Constructs a submit button from the given options
+      # Constructs a submit button from the given options.
       #
-      # @param [String] caption
+      # @param [String] caption (defaults to: +Submit+)
       #   The caption for the submit button.
       # @param [Hash] options
       #   The html options for the input field.
@@ -677,14 +657,17 @@ module Padrino
       #
       # @example
       #   submit_tag "Create", :class => 'success'
+      #   submit_tag :class => 'btn'
       #
-      # @api public
-      def submit_tag(caption="Submit", options={})
+      def submit_tag(*args)
+        options = args[-1].is_a?(Hash) ? args.pop : {}
+        caption = args.length >= 1 ? args.shift : "Submit"
         options.reverse_merge!(:value => caption)
         input_tag(:submit, options)
       end
 
-      # Constructs a submit button from the given options
+      ##
+      # Constructs a submit button from the given options.
       #
       # @param [String] source
       #   The source image path for the button.
@@ -696,12 +679,12 @@ module Padrino
       # @example
       #   submit_tag "Create", :class => 'success'
       #
-      # @api public
       def image_submit_tag(source, options={})
         options.reverse_merge!(:src => image_path(source))
         input_tag(:image, options)
       end
 
+      ##
       # Constructs a hidden field containing a CSRF token.
       #
       # @param [String] token
@@ -712,17 +695,28 @@ module Padrino
       # @example
       #   csrf_token_field
       #
-      # @api public
       def csrf_token_field(token = nil)
-        if defined? session
-          token ||= (session[:csrf] ||= SecureRandom.hex(32))
-        end
+        hidden_field_tag csrf_param, :value => csrf_token
+      end
 
-        hidden_field_tag :authenticity_token, :value => token
+      ##
+      # Constructs meta tags `csrf-param` and `csrf-token` with the name of the
+      # cross-site request forgery protection parameter and token, respectively.
+      #
+      # @return [String] The meta tags with the CSRF token and the param your app expects it in.
+      #
+      # @example
+      #   csrf_meta_tags
+      #
+      def csrf_meta_tags
+        if is_protected_from_csrf?
+          meta_tag(csrf_param, :name => 'csrf-param') <<
+          meta_tag(csrf_token, :name => 'csrf-token')
+        end
       end
 
       ##
-      # Creates a form containing a single button that submits to the url.
+      # Creates a form containing a single button that submits to the URL.
       #
       # @overload button_to(name, url, options={})
       #   @param [String]  caption  The text caption.
@@ -739,6 +733,8 @@ module Padrino
       #   Instructs ujs handler to handle the submit as ajax.
       # @option options [Symbol] :method
       #   Instructs ujs handler to use different http method (i.e :post, :delete).
+      # @option options [Hash] :submit_options
+      #   Hash of any options, that you want to pass to submit_tag (i.e :id, :class)
       #
       # @return [String] Form and button html with specified +options+.
       #
@@ -750,113 +746,174 @@ module Padrino
       #   #   <input type="submit" value="Delete" />
       #   # </form>
       #
-      # @api public
       def button_to(*args, &block)
         name, url = args[0], args[1]
         options   = args.extract_options!
         options['data-remote'] = 'true' if options.delete(:remote)
+        submit_options = options.delete(:submit_options) || {}
         if block_given?
           form_tag(url, options, &block)
         else
-          form_tag(url, options) do
-            submit_tag(name)
+          form_tag(url, options.merge!(:not_concat => true)) do
+            submit_tag(name, submit_options)
           end
         end
       end
 
+      ##
+      # Constructs a range tag from the given options.
+      #
+      # @example
+      #   range_field_tag('ranger_with_min_max', :min => 1, :max => 50)
+      #   range_field_tag('ranger_with_range', :range => 1..5)
+      #
+      # @param [String] name
+      #   The name of the range field.
+      # @param [Hash] options
+      #   The html options for the range field.
+      # @option options [Integer] :min
+      #  The min range of the range field.
+      # @option options [Integer] :max
+      #  The max range of the range field.
+      # @option options [range] :range
+      #  The range, in lieu of :min and :max.  See examples for details.
+      # @return [String] The html range field
+      #
+      def range_field_tag(name, options = {})
+        options.reverse_merge!(:name => name)
+        if range = options.delete(:range)
+          options[:min], options[:max] = range.min, range.max
+        end
+        input_tag(:range, options)
+      end
+
       protected
 
-        ##
-        # Returns an array of option items for a select field based on the given collection
-        # fields is an array containing the fields to display from each item in the collection
-        #
-        def options_from_collection(collection, fields)
-          collection.map { |item| [ item.send(fields.first), item.send(fields.last) ] }
-        end
+      ##
+      # Returns an array of option items for a select field based on the given collection.
+      #
+      # @param [Array] fields
+      #   fields is an array containing the fields to display from each item in the collection.
+      #
+      def options_from_collection(collection, fields)
+        collection.map { |item| [ item.send(fields.first), item.send(fields.last) ] }
+      end
 
-        #
-        # Returns the options tags for a select based on the given option items
-        #
-        def options_for_select(option_items, selected_value=nil)
-          return [] if option_items.blank?
-          option_items.map do |caption, value|
-            value ||= caption
-            content_tag(:option, caption, :value => value, :selected => option_is_selected?(value, caption, selected_value))
-          end
+      ##
+      # Returns the options tags for a select based on the given option items.
+      #
+      def options_for_select(option_items, selected_value=nil)
+        return [] if option_items.blank?
+        option_items.map do |caption, value, disabled|
+          value ||= caption
+          disabled ||= false
+          content_tag(:option, caption, :value => value, :selected => option_is_selected?(value, caption, selected_value), :disabled => disabled)
         end
+      end
 
-        #
-        # Returns the optgroups with options tags for a select based on the given :grouped_options items
-        #
-        def grouped_options_for_select(collection, selected=nil, prompt=false)
-          if collection.is_a?(Hash)
-            collection.map do |key, value|
-              content_tag :optgroup, :label => key do
-                options_for_select(value, selected)
-              end
-            end
-          elsif collection.is_a?(Array)
-            collection.map do |optgroup|
-              content_tag :optgroup, :label => optgroup.first do
-                options_for_select(optgroup.last, selected)
-              end
-            end
+      ##
+      # Returns the optgroups with options tags for a select based on the given :grouped_options items.
+      #
+      def grouped_options_for_select(collection, selected=nil, prompt=false)
+        if collection.is_a?(Hash)
+          collection.map do |key, value|
+            # Hash format:
+            # {:first => [1,2,3], :second => [4,5,6]}
+            # or:
+            # {:first => [[1,2,3], {:disabled => true}], :second => [4,5,6]}
+            attributes_hash = value.last.is_a?(Hash) ? value.pop : nil
+            disabled ||=  attributes_hash && attributes_hash.include?(:disabled) ? attributes_hash[:disabled] : false
+            content_tag :optgroup, options_for_select(value, selected), :label => key, :disabled => disabled
+          end
+        elsif collection.is_a?(Array)
+          # Array format:
+          # ["Option Label", [:option1, :option2, ...]]
+          # or:
+          # ["Option Label", [:option1, :option2, ...], true]
+          # the last item tells if it is disabled or not. This is keeps it backwards compatible.
+          collection.map do |optgroup|
+            disabled ||= optgroup.count > 2 ? optgroup.pop : false
+            content_tag :optgroup, options_for_select(optgroup.last, selected), :label => optgroup.first, :disabled => disabled
           end
         end
+      end
 
-        #
-        # Returns the blank option serving as a prompt if passed
-        #
-        def blank_option(prompt)
-          return unless prompt
-          case prompt
-            when String then content_tag(:option, prompt,       :value => '')
-            when Array  then content_tag(:option, prompt.first, :value => prompt.last)
-            else             content_tag(:option, '',           :value => '')
-          end
+      ##
+      # Returns the blank option serving as a prompt if passed.
+      #
+      def blank_option(prompt)
+        return unless prompt
+        case prompt
+          when String then content_tag(:option, prompt,       :value => '')
+          when Array  then content_tag(:option, prompt.first, :value => prompt.last)
+          else             content_tag(:option, '',           :value => '')
         end
+      end
+
+      ##
+      # Returns whether the application is being protected from CSRF. Defaults to true.
+      #
+      def is_protected_from_csrf?
+        defined?(settings) ? settings.protect_from_csrf : true
+      end
+
+      ##
+      # Returns the current CSRF token (based on the session). If it doesn't exist,
+      # it will create one and assign it to the session's `csrf` key.
+      #
+      def csrf_token
+        session[:csrf] ||= SecureRandom.hex(32) if defined?(session)
+      end
+
+      ##
+      # Returns the param/field name in which your CSRF token should be expected by your
+      # controllers. Defaults to `authenticity_token`.
+      #
+      # Set this in your application with `set :csrf_param, :something_else`.
+      #
+      def csrf_param
+        defined?(settings) && settings.respond_to?(:csrf_param) ?
+          settings.csrf_param : :authenticity_token
+      end
 
       private
-        ##
-        # Returns the FormBuilder class to use based on all available setting sources
-        # If explicitly defined, returns that, otherwise returns defaults.
-        #
-        # @example
-        #   configured_form_builder_class(nil) => StandardFormBuilder
-        #
-        # @api private
-        def configured_form_builder_class(explicit_builder=nil)
-          default_builder    = self.respond_to?(:settings) && self.settings.default_builder
-          configured_builder = explicit_builder || default_builder || 'StandardFormBuilder'
-          configured_builder = "Padrino::Helpers::FormBuilder::#{configured_builder}".constantize if configured_builder.is_a?(String)
-          configured_builder
-        end
+      ##
+      # Returns the FormBuilder class to use based on all available setting sources
+      # If explicitly defined, returns that, otherwise returns defaults.
+      #
+      # @example
+      #   configured_form_builder_class(nil) => StandardFormBuilder
+      #
+      def configured_form_builder_class(explicit_builder=nil)
+        default_builder    = self.respond_to?(:settings) && self.settings.default_builder
+        configured_builder = explicit_builder || default_builder || 'StandardFormBuilder'
+        configured_builder = "Padrino::Helpers::FormBuilder::#{configured_builder}".constantize if configured_builder.is_a?(String)
+        configured_builder
+      end
 
-        ##
-        # Returns an initialized builder instance for the given object and settings
-        #
-        # @example
-        #   builder_instance(@account, :nested => { ... }) => <FormBuilder>
-        #
-        # @api private
-        def builder_instance(object, settings={})
-           builder_class = configured_form_builder_class(settings.delete(:builder))
-           builder_class.new(self, object, settings)
-        end
+      ##
+      # Returns an initialized builder instance for the given object and settings.
+      #
+      # @example
+      #   builder_instance(@account, :nested => { ... }) => <FormBuilder>
+      #
+      def builder_instance(object, settings={})
+         builder_class = configured_form_builder_class(settings.delete(:builder))
+         builder_class.new(self, object, settings)
+      end
 
-        ##
-        # Returns whether the option should be selected or not
-        #
-        # @example
-        #   option_is_selected?("red", "Red", ["red", "blue"])   => true
-        #   option_is_selected?("red", "Red", ["green", "blue"]) => false
-        #
-        # @api private
-        def option_is_selected?(value, caption, selected_values)
-          Array(selected_values).any? do |selected|
-            [value.to_s, caption.to_s].include?(selected.to_s)
-          end
+      ##
+      # Returns whether the option should be selected or not.
+      #
+      # @example
+      #   option_is_selected?("red", "Red", ["red", "blue"])   => true
+      #   option_is_selected?("red", "Red", ["green", "blue"]) => false
+      #
+      def option_is_selected?(value, caption, selected_values)
+        Array(selected_values).any? do |selected|
+          [value.to_s, caption.to_s].include?(selected.to_s)
         end
-    end # FormHelpers
-  end # Helpers
-end # Padrino
+      end
+    end
+  end
+end