Add safeguards to mobile sign in

codidact / qpixel

Q&A-based community knowledge-sharing software

https://codidact.com

GNU Affero General Public License v3.0

393 stars 68 forks source link

Closed ArtOfCode- closed 1 year ago

ArtOfCode- commented 1 year ago

meta:289208

Mobile sign in is too open by default. We should:

Conceal the QR code behind a <details> section by default
Add a warning above it explaining the risks
EITHER add a user preference dictating whether to show the MSI icon, OR remove it entirely and just use the MSI link in the profile.