Protect Camping apps from CSRF

camping-csrf.rb

require 'camping'
require 'camping/session'
require 'rack/csrf'

Camping.goes :E

module E
  use Rack::Csrf
  include Camping::Session
end

module E::Helpers
  # Override form to always include the CSRF-tag
  def form(*)
    super do
      self << Rack::Csrf.tag(@env)
      yield
    end
  end
end

module E::Controllers
  class Index
    def get
      render :index
    end

    def post
      "OK: #{@input.name}"
    end
  end
end

module E::Views
  def index
    form :action => R(Index), :method => :post do
      input :name => "name"
      input :type => "submit"
    end
  end
end