Extracting a QR login from a production app and closing 11 security holes before merge June 8, 2026 · Dev.to Read full story at source