Never URLs Not Working for Localhost / 127.0.0.1

Question

I'm a software developer with LastPass installed in Chrome & Edge.  I use it extensively for personal use, but it is not useful to my work or users of my code, since the websites I work on are 100% internal.

When running the websites on my local machine, they run as https://localhost:40299/ and another port (two sites).  Under LastPass settings -> advanced -> Autofill Settings -> Never URLs, I have:

127.0.0.1

localhost

localhost:40299

http://localhost:*/*

All of them are set to "Never do anything" and "All pages", but still the red LastPass icon appears on numerous pages of my apps offering to autofill addresses and DOB for records that are obviously not about me.  It's frustrating because it really gets in the way of other icons and sometimes makes it impossible for me to click on the things that it appears over the top of.

How do I get Never URLs to work properly for "https://localhost:40299/" and all subpages?

Thank you!

patrick · Answer

Hi Alejandra,

Yes, the other two websites I have setup as Never URLs work correctly.  I also just tried adding my bank, syncing my settings in the Edge extension, and then opened my bank website to see that the login stopped autofilling.  It did work fine.

Aren't support cases only for Premium members?  I am a Free member.  One of the reasons I've chosen not to pay for LastPass over the years is bugs like this one, unfortunately.

Also, when I go to the URL you provided right now, there are a number of errors on the page, including the images not loading.  When I open the developer console, there are a ton of messages similar to "[Report Only] Refused to frame 'https://cdn.lputil.com/'; because it violates the following Content Security Policy directive: "frame-src 'self' *.force.com [...]"

Any suggestions?  Thank you.

LastPass Support · Answer

Hello @patrick​,

Thank you for your reply.

I was able to check the information shared with me and according to my records and steps follow the process you follow is the correct one and the never URL rule added should be working as requeted. I will like this process to continue under investigation, unfortunately, in the public forum community will not be an option. Would you please create a case by going here: https://support.lastpass.com/s/. Please attach to the case the real screenshots of the set up and the website with the one you are having issues.

I also, would recommend you verify if this happens with other websites that are not using a localhost to verify if using other website the issue is the same.

Kind Regards,

Alejandra

LastPass Support

patrick · Answer

Hi Alejandra,

Below are a screenshot of my settings and a screenshot of my app running in Edge.  You can see the URL in the screenshots and you can see the LastPass icon in numerous fields.  Can you please tell me if I've configured it correctly?  Should I try a different URL?

I've been having this problem for years and never reported it until now.  My primary hard drive failed recently, so my whole computer was reformatted, and the problem still persists.  I had to take all the steps you mentioned to sort out a problem with LastPass not staying logged in, so I can say confidently that all those steps have been done already.  Thank you :)

This is all fake test data from our system, so there's no customer information being shared and no real addresses or phone numbers.