mirror of
https://github.com/nestriness/nestri.git
synced 2026-11-03 22:22:39 +02:00
The confirm screen named the client asking to sign in. That name is chosen by whoever started the request, so it let a stranger's request introduce itself as anything at all; and to the person reading, it is just a device. It now says "A device is asking to sign in", and a test checks that a client's self-chosen name never appears. The warning about choosing Deny moves under the two buttons, as small print in the same style as the terms line on the email screen, so the question and its two answers read first.