CSP: use modal instead of inline js for profile email deletion

profiles/templates/profiles/_profile_card.html

@@ -45,9 +45,29 @@
 
 		  </td>
 		  <td class="d-flex">
-                    <form method="post" action="{% url 'profiles:toggle_email_status' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-link">{{ profile_mail.still_valid|yesno:'Deprecate,Mark valid' }}</button></form>
-		    <form method="post" action="{% url 'profiles:email_make_primary' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-link">Make primary</button></form>
-                    <form method="post" action="{% url 'profiles:delete_profile_email' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-link text-danger ml-2" onclick="return confirm('Sure you want to delete {{ profile_mail.email }}?')"><i class="fa fa-trash"></i></button></form>
+                    <form method="post" action="{% url 'profiles:toggle_email_status' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-link py-0">{{ profile_mail.still_valid|yesno:'Deprecate,Mark valid' }}</button></form>
+		    <form method="post" action="{% url 'profiles:email_make_primary' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-link py-0">Make primary</button></form>
+		    <a type="button" class="btn py-0" data-toggle="modal" data-target="#confirmDeleteEmailModal"><i class="fa fa-trash text-danger"></i></a>
+		    <div class="modal" id="confirmDeleteEmailModal" tabindex="-1" role="dialog">
+		      <div class="modal-dialog" role="document">
+			<div class="modal-content">
+			  <div class="modal-header">
+			    <h4 class="modal-title">Confirm email deletion</h4>
+			    <button type="button" class="close" data-dismiss="modal" aria-label="Close">
+			      <span aria-hidden="true">&times;</span>
+			    </button>
+			  </div>
+			  <div class="modal-body">
+			    Are you sure you want to delete {{ profile_mail.email }}?
+			  </div>
+			  <div class="modal-footer">
+			    <button type="button" class="btn btn-secondary" data-dismiss="modal">Cancel</button>
+			    <form method="post" action="{% url 'profiles:delete_profile_email' profile_mail.id %}">{% csrf_token %}<button type="submit" class="btn btn-danger">Confirm</button></form>
+			  </div>
+			</div>
+		      </div>
+		    </div>
+
 		  </td>
 		</tr>
     	      {% endfor %}