Unblocking Javascript paste disable in login page

Windows 10 Home 22H2
Edge 143.0.3650.96
Bitwarden 2025.12.0

When I go to https:// www. goodrx. com/ (spaces added to overcome this forum’s limit of only 2 URLs per post), and click “Log in”, Bitwarden (and Edge) don’t recognize there is an input field to enter my e-mail address. Neither Edge nor Bitwarden pre-fill the input element nor can I make Bitwarden save what I enter.

In Edge, when I right-click on the input field, and select Inspect in the context menu, it shows the element is:

<input slot="input" type="email" id="input-vaadin-email-field-3" pattern="^[\w\.\%\+\-']+@[\w\.\-]+\.[A-Za-z]{2,}$" aria-labelledby="label-vaadin-email-field-0" name="email" required="" autocomplete="username">

Autofill by Bitwarden does not work. I get to the login page, but Bitwarden does not automatically fill the input field with the value I saved in Bitwarden for the username. I tried to click on the Bitwarden toolbar icon which, by default, selected the goodrx. com entry, try to click Fill, but it failed. I then clicked to copy the username from that Bitwarden entry, and then tried to Ctrl-V paste into the input field, but nothing got copied from the clipboard into the input field.

I tried manually creating an entry in Bitwarden. Right-click on the input element in the web page, select Bitwarden in the context menu, Autofill login, Add. I add an entry for just the username which is the only input field in that web page. They don’t ask for password. Instead after entering the username (email address), they send a code to my e-mail address that I have to enter in an ensuing page. That is they enforce 2FA, but without even asking for a password. Bitwarden’s Fill and copy options do not work, because it appears pasting is disable in the web page.

Maybe copy/paste is disabled in that login page’s script, so Bitwarden’s Fill and its copy-to-clipboard won’t work, because the matching operation of paste is disabled in the web page.

For any web page with login fields, can BitWarden disable a Javascripted paste-disable to force the page to accept pasted content from the Windows clipboard? Something like adding:

var allowPaste = function(e){
e.stopImmediatePropagation();
return true;
};
document.addEventListener(‘paste’, allowPaste, true);

to the web page, and refreshing it to effect a reenable of pasting.

Lots of sites disallow paste, but most do not disable paste in their login page. GoodRX chose to force their customers to manually enter their e-mail address. Manual input incurs more errors than using stored strings (in Bitwarden or Edge’s password manager).

I’ve only very briefly looked at web browser extensions that can disable the paste-disable in Javascript in a web page. Might even achieve reenabling the Javascripted paste-disable using Javascript in a bookmarklet. Haven’t tried any yet. However, whether with an add-on or bookmarklet, the operation would not be automatic to reenable paste in Javascript in the login page, and disable it again loading the next web page.

@VanguardLH Welcome to the forum!

Not sure why you have this impression — I am able to paste into the email input field without issues.

Autofilling does not work, however, as a result of restrictions imposed by the webpage.

@VanguardLH Welcome to the forum!

Just FYI, you can always report sites with autofill issues via those Google forms:

What I found when loading the login page is there is a blinking vertical cursor inside the input field misleading me into thinking that element has focus in the web page. So, I just hit Ctrl-V expecting to paste into the active element. Nope. I have to click inside the element to do Ctrl-V. Right-clicking in the element to select Paste from the context menu also clicks inside the element to actually give it focus. The vertical blinking cursor inside the input field does not indicate that element has focus.

The focus is there. Not it isn’t until you click inside the element. While lots of login pages require you change focus to an input field to enter anything in it, sites can also designate a default element to get focus when the page loads. The blinking vertical cursor mislead me into believing the input field had focus. Nope, not I clicked on it.

1 Like