Currently the demo page fails to work if JavaScript is disabled, but it could quite easily fall back to using server-side rendering into an iframe. The generated iframe content can include inline download links for PNG / SVG, avoiding the need for multiple server requests.
This will require redeploying to a location which allows server-side code (currently hosted on GitLab pages which only supports static content).
Since this will involve sending user content to the server to generate the code, it should include a warning with a recommendation to enable JavaScript for privacy. The server should be configured to avoid logging the QR code content.
Currently the demo page fails to work if JavaScript is disabled, but it could quite easily fall back to using server-side rendering into an iframe. The generated iframe content can include inline download links for PNG / SVG, avoiding the need for multiple server requests.
This will require redeploying to a location which allows server-side code (currently hosted on GitLab pages which only supports static content).
Since this will involve sending user content to the server to generate the code, it should include a warning with a recommendation to enable JavaScript for privacy. The server should be configured to avoid logging the QR code content.