feat(autocapture): capture paste interactions - #4635
Merged
Conversation
Contributor
Prompt To Fix All With AI### Issue 1
packages/browser/src/autocapture.ts:515
**DOM allowlist rejects paste events**
When `capture_copied_text` is enabled alongside any `dom_event_allowlist`, `shouldCaptureDomEvent` rejects paste because the public allowlist supports only `click`, `change`, and `submit`, causing paste interactions to be silently omitted.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.Reviews (1): Last reviewed commit: "feat(autocapture): capture paste interac..." | Re-trigger Greptile |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| // we also don't want to restrict clipboard checks to clicks, | ||
| // so we pass that knowledge in here, rather than add the logic inside the check | ||
| isCopyAutocapture ? ['copy', 'cut'] : undefined, | ||
| isClipboardAutocapture ? ['copy', 'cut', 'paste'] : undefined, |
Contributor
There was a problem hiding this comment.
When capture_copied_text is enabled alongside any dom_event_allowlist, shouldCaptureDomEvent rejects paste because the public allowlist supports only click, change, and submit, causing paste interactions to be silently omitted.
Knowledge Base Used: Browser event capture and autocapture
Prompt To Fix With AI
This is a comment left during a code review.
Path: packages/browser/src/autocapture.ts
Line: 515
Comment:
**DOM allowlist rejects paste events**
When `capture_copied_text` is enabled alongside any `dom_event_allowlist`, `shouldCaptureDomEvent` rejects paste because the public allowlist supports only `click`, `change`, and `submit`, causing paste interactions to be silently omitted.
**Knowledge Base Used:** [Browser event capture and autocapture](https://app.greptile.com/posthog-org-19734/-/custom-context/knowledge-base/posthog/posthog-js/-/docs/browser-event-capture.md)
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.![veria-ai[bot]](https://avatars.githubusercontent.com/in/1723776?s=60&v=4){kind=small}
PR overviewAll previously flagged issues have been addressed. No open security concerns remain on this pull request. Security reviewNo open security issues remain on this pull request. Fixed/addressed: 1 · PR risk: 0/10 |
Contributor
Contributor
posthog-js Compliance ReportDate: 2026-08-25 11:20:12 UTC ✅ All Tests Passed!26/26 tests passed Capture Tests✅ 26/26 tests passed View Details
|
Contributor
|
Size Change: +2.91 kB (+0.01%) Total Size: 20.1 MB 📦 View Changed
ℹ️ View Unchanged
|
marandaneto
approved these changes
Aug 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Users can autocapture copy and cut interactions, but paste interactions are missing from the event stream.
Paste contents can contain secrets, so paste capture must not read clipboard data.
Changes
$copy_type: pasteand do not read clipboard contents.$selected_contentand$clipboard_text_lengthfor compatibility.dom_event_allowlistcontinues to control normal autocapture without disabling clipboard events.Release info Sub-libraries affected
Libraries affected
Checklist
If releasing new changes
🤖 Agent context
Autonomy: Human-driven (agent-assisted)
Codex desktop authored this human-directed change. It used the Simplified Technical English, writing-tests, and writing-pr-descriptions skills.
Input change events already describe content changes, so paste events record only the interaction.
Review feedback added compatibility with
dom_event_allowlist. Only paste omits clipboard text and length.