diff --git a/.github/scripts/file-whitelist-check.sh b/.github/scripts/file-whitelist-check.sh
index ff8387a48..344dd38dd 100755
--- a/.github/scripts/file-whitelist-check.sh
+++ b/.github/scripts/file-whitelist-check.sh
@@ -151,6 +151,7 @@ SAFE_FILENAME_PATTERNS=(
 "\.secrets\.baseline$"
 ".*session_passwords\.py$"
 ".*change_password\.html$"
+"tests/ui_tests/.*password.*\.js$"
 )
 
 # Check if filename looks suspicious
diff --git a/tests/ui_tests/test_register_validation.js b/tests/ui_tests/test_register_validation.js
index 898967983..ddd7c8539 100644
--- a/tests/ui_tests/test_register_validation.js
+++ b/tests/ui_tests/test_register_validation.js
@@ -204,6 +204,10 @@ async function testRegisterValidation() {
         await page.focus('input[name="username"]');
         await page.keyboard.type('user@email.com', { delay: 50 });
 
+        // Blur the field to trigger browser validation state update
+        await page.evaluate(() => document.querySelector('input[name="username"]').blur());
+        await new Promise(resolve => setTimeout(resolve, 100));
+
         validity = await page.evaluate(el => ({
             valid: el.validity.valid,
             patternMismatch: el.validity.patternMismatch,