Fix delete color and contrast

internal/server/server.go

@@ -61,12 +61,12 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) { s.handler.S
 func (s *Server) routes() http.Handler {
 	mux := http.NewServeMux()
 	mux.HandleFunc("GET /{$}", s.handleIndex)
-	mux.HandleFunc("POST /api/upload", s.handleUpload)
+	mux.HandleFunc("POST /upload", s.handleUpload)
 	mux.HandleFunc("GET /api/limits", s.handleLimits)
 	mux.HandleFunc("GET /admin", s.handleAdmin)
 	mux.HandleFunc("GET /d/{id}", s.handleDownload)
 	mux.HandleFunc("GET /i/{id}", s.handleInfo)
-	mux.HandleFunc("POST /api/d/{id}/delete", s.handleDelete)
+	mux.HandleFunc("POST /d/{id}/delete", s.handleDelete)
 	mux.HandleFunc("GET /login", s.handleLoginPage)
 	mux.HandleFunc("POST /login", s.handleLogin)
 	mux.HandleFunc("POST /logout", s.handleLogout)
@@ -104,10 +104,10 @@ func (s *Server) staticHandler() http.Handler {
 // appCSP locks the application pages down to their own origin. The frontend has
 // no inline script and no third-party anything, so this can be strict.
 //
-// connect-src is not optional here: the upload page talks to /api/upload and
-// /api/limits over XMLHttpRequest, and every fetch-directive left unlisted
-// falls back to default-src, so omitting it makes the browser block every
-// upload before it reaches the network. See TestAppCSPAllowsWhatThePageDoes.
+// connect-src is not optional here: the upload page posts to /upload over
+// XMLHttpRequest to draw a progress bar, and every fetch-directive left
+// unlisted falls back to default-src, so omitting it makes the browser block
+// every upload before it reaches the network. See TestAppCSPAllowsWhatThePageDoes.
 const appCSP = "default-src 'none'; script-src 'self'; style-src 'self'; " +
 	"img-src 'self' data:; connect-src 'self'; form-action 'self'; " +
 	"base-uri 'none'; frame-ancestors 'none'"