GitHub's two-factor authentication has a significant flaw; am able to add 7 digit random digit , it should have a max length of 6

Expected Behavior
it should only accept 6 digit

Current Behavior
its accepting 7 digit ( i tried multiple times)

Possible Solution
simple textbox limit

Start by locating the browser-side two-factor authentication textbox and checking how its input is currently validated. Confirm the behavior with six- and seven-digit values, then ensure the field accepts six digits but rejects longer input and add or update the relevant validation coverage if the project provides it.

Written by the indexing model from the issue text.