dynamic icons for form-item actions and other quibbles.

.gitignore

@@ -1,8 +1,7 @@
 development.env
 *.py[cod]
 node_modules
-
-node_modules
+npm-debug.log
 
 # C extensions
 *.so

formspree/forms/views.py

@@ -441,8 +441,7 @@ def form_submissions(hashid, format=None):
             )
 
 @login_required
-def form_toggle():
-    hashid = request.form.get('hashid')
+def form_toggle(hashid):
     form = Form.get_with_hashid(hashid)
 
     # check that this request came from user dashboard to prevent XSS and CSRF
@@ -473,8 +472,7 @@ def form_toggle():
         return redirect(url_for('dashboard'))
 
 @login_required
-def form_deletion():
-    hashid = request.form.get('hashid')
+def form_deletion(hashid):
     form = Form.get_with_hashid(hashid)
 
     # check that this request came from user dashboard to prevent XSS and CSRF
@@ -503,8 +501,7 @@ def form_deletion():
         return redirect(url_for('dashboard'))
 
 @login_required
-def submission_deletion(hashid):
-    submissionid = request.form.get('submissionid')
+def submission_deletion(hashid, submissionid):
     submission = Submission.query.get(submissionid)
     form = Form.get_with_hashid(hashid)
 

formspree/routes.py

@@ -32,9 +32,9 @@ def configure_routes(app):
     app.add_url_rule('/forms/sitewide-check', view_func=forms.views.sitewide_check, methods=['GET'])
     app.add_url_rule('/forms/<hashid>/', 'form-submissions', view_func=forms.views.form_submissions, methods=['GET'])
     app.add_url_rule('/forms/<hashid>.<format>', 'form-submissions', view_func=forms.views.form_submissions, methods=['GET'])
-    app.add_url_rule('/forms/toggle', 'form-toggle', view_func = forms.views.form_toggle, methods=['POST'])
-    app.add_url_rule('/forms/delete', 'form-deletion', view_func=forms.views.form_deletion, methods=['POST'])
-    app.add_url_rule('/forms/<hashid>/delete', 'submission-deletion', view_func=forms.views.submission_deletion, methods=['POST'])
+    app.add_url_rule('/forms/<hashid>/toggle', 'form-toggle', view_func=forms.views.form_toggle, methods=['POST'])
+    app.add_url_rule('/forms/<hashid>/delete', 'form-deletion', view_func=forms.views.form_deletion, methods=['POST'])
+    app.add_url_rule('/forms/<hashid>/delete/<submissionid>', 'submission-deletion', view_func=forms.views.submission_deletion, methods=['POST'])
 
     # Webhooks
     app.add_url_rule('/webhooks/stripe', view_func=users.views.stripe_webhook, methods=['POST'])