All you need to do is use standard HTML form elements. None of those questions are even relevant, just excuses to increase complexity and make things harder for everyone.

Why would you ever disable paste? It can only make it more likely that the user will make a mistake (and hate you for making the form harder to fill out).

The thing that winds me up about credit card input is that it won't let me enter it as it is written on my card, in groups of four digits.

The same applies to fields that expect telephone numbers. They should all accept arbitrary amounts of white-space.

If you don't allow me to paste a card number in I might well not buy from you.

Funny, I'd assume we'd got consensus on that one.

- Anyone who recommends disabling paste as a security feature is a fraud

- Doing UA sniffing is always a mistake

- If the user's browser doesn't support `autocomplete="cc-number"` then they're already used to it not working, you don't need to care about it

- You should always make your form as accessible as possible regardless of if the user is a robot or visually impaired

- Making your website intentionally inaccessible may be a federal crime in the USA as the ADA doesn't care what you think about openclaw.

This is the kind of thinking that takes a normal credit card form and makes it so weird that auto fill doesn't work.

You can just do nothing and it will work. It's also the easiest and cheapest option.