Setup deletion confirmation describes deletion of contact information

[exromany]

Locations

• csm-widget/features/surveys/survey-setup/confirm-remove-modal.tsx:17-20
• csm-widget/features/surveys/survey-setup/survey-setup.tsx:100-105
• csm-widget/features/surveys/survey-delegator/delegator-setup-form.tsx:114-119

Summary

The confirmation shown before deleting a setup says that filled contact information will be deleted. Both operator and delegated setup forms then execute setup deletion, so the final reviewed target contradicts the destructive effect.

Root cause

The shared setup ConfirmRemoveModal hardcodes contact-information wording and receives no setup identity, while both setup forms call their indexed remove() operation after that modal resolves successfully.

Impact

An authenticated operator or delegate can approve a permanent setup deletion after being explicitly shown confirmation for a different data category. The deleted survey can be recreated but its prior answers are lost; this is correctable non-financial state loss with no on-chain effect, so severity is low.

Scenario

• A user opens an existing operator or delegated setup and presses Delete.
• The modal asks whether to delete “filled contact info,” without naming the setup or index.
• The user accepts the displayed confirmation.
• The handler deletes the indexed setup record rather than contact information.

---

Drafted from LidoLens finding SURVEY-DATA-02