GitHub's two-factor authentication has a significant flaw; am able to add 7 digit random digit , it should have a max length of 6

[LostNSeeker]

Expected Behavior it should only accept 6 digit

Current Behavior its accepting 7 digit ( i tried multiple times)

Possible Solution simple textbox limit