Android Question WebView does not display a site with 3ds secure redirect

StanVin

Member
Licensed User
Longtime User
Different banks use different internal redirects after receiving the request.
I attach two logs, number 1 works as it should, number 2 does not display the page and does not perform the next redirect for payment.
I noticed that OverrideUrl is triggered in a good bank, in bad bank one it does not.

1 Good Bank:
HTML:
<html><head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>Redirect 3D authorization</title>
       
        <script>
            window.onload = submitForm;
            function submitForm() {
                document.downloadForm.submit();
            }
        </script>
    </head>
    <body>
        <div id="screen" style="width:300px; height:500px;">
            <form name="downloadForm" action="https://www.avangard.ru/acs/pareq/f0b9a0f29107488ead59de630ac4cad4" method="POST">
               
                <input type="hidden" name="PaReq" value="eJxVUV1u8jAQvAriAPHacUiCFktpg9Q88PFTegA3rCBSCaljGvhOXzs00L7tjHfHs7O4PRii/JXK
syGFC2pbvadRtZuNOUDME4hCCWmSJnKscJVt6FPhF5m2OtWKBxAIZAN006Y86Noq1OXnU/FPSRCh
iJH9QDySKXI1B3DawJHdMNb6SOqJWitW+oqsh1iezrU1VzWRIbIB4Nl8qIO1zZSxruuCdz/U6GtQ
k0XmH5E9XKzOvmqd2KXaqeI52xf5vFvk5WWZZ3zxf90tt/toma9nyHwH7rQlJYAnfvcRj6ehnHLn
s+dRH70LxQUEAKPN28YtdqOw8T9l93cAZL8pdOkaqsthmwEhXZpTTa7DxXivkT2MP7/4MEvrYuJR
mKRCJBGPBA8kyDidxDJOQMSpj7hv8oqVC8p5iHpJD5B5GfZzPRdQf2RX/Tn+N1eHp1s=">
               
               
                <input type="hidden" name="TermUrl" value="https://pay.best2pay.net:443/webapi/Purchase?values=3101c7a8-a18d-42e3-b088-561786592394">
               
               
                <input type="hidden" name="MD" value="    1007180534098985,12000,0000000000004978,08/21,1007180534098985">
               
                <div>
                    <p>You will now be redirected to the 3DS authorization page. If this does not happen automatically, click the Next button.</p>
                    <input type="submit" value="Next">
                </div>
            </form>
        </div>
   
</body></html>
WebCardPay_OverrideUrl: https://www.avangard.ru/3dsecure2/acs2bank.do?id=1538922851521.40479674780279
PageFinished: B4A.CallSub('ProcessHTML', false, document.documentElement.outerHTML)
ProcessHTML: <html><head>    <meta http-equiv="Content-Type" content="text/html; charset=windows-1251">    <title>Проверка платежа Банком АВАНГАРД</title>    <style>body { font-family: Arial, Helvetica, Verdana, sans-serif; font-weight: light; font-size:8pt;}table { font-size: inherit; }a:link {color: #828282;}a:visited {color: #828282;}a:active {color: #828282;}a:hover {color: #828282;}.submit{cursor: pointer;width: 130px;font-family: Arial, Helvetica, Verdana, sans-serif; font-weight: bold; font-size:8pt;color: #000000;background-color: #FFFFFF;   border-top-width: 1px;    border-bottom-width: 1px;    border-left-width: 1px;    border-right-width: 1px;    border-top-style: solid;    border-bottom-style: solid;    border-left-style: solid;    border-right-style: solid;    border-top-color: #F48222;    border-bottom-color: #F48222;    border-left-color: #F48222;    border-right-color: #F48222; } </style><script type="text/javascript">function setFocus1(){  if (document.forms[0] != null) {    if (document.getElementById("scrcode1") != null ) {      document.getElementById("scrcode1").focus();       }    }}function setFocus2(){  if (document.forms[0] != null) {    if (document.getElementById("scrcode2") != null ) {      document.getElementById("scrcode2").focus();       }    }}function SetElementVisible(elementName) {   var div = document.getElementById(elementName);   if (div != null) {     if (div.style.visibility != "visible") {       div.style.visibility="visible";       div.style.display = "";     }   }}function SetElementHidden(elementName) {   var div = document.getElementById(elementName);   if (div != null) {     if (div.style.visibility != "hidden") {       div.style.visibility="hidden";       div.style.display = "none";     }   }}function updatePageSendSms() {     if (request.readyState == 4) {       if (request.status == 200) {         var response = request.responseText.split("|");         SetElementHidden('smsway1');         SetElementVisible('smsway2');         document.getElementById("dt").innerHTML = response[0];         setFocus2();       } else {         alert("status is " + request.status);       }       }}   var request = false;   try {     request = new XMLHttpRequest();   } catch (trymicrosoft) {     try {       request = new ActiveXObject("Msxml2.XMLHTTP");     } catch (othermicrosoft) {       try {         request = new ActiveXObject("Microsoft.XMLHTTP");       } catch (failed) {         request = false;       }       }   }   if (!request) {     alert("Error initializing XMLHttpRequest!");   }   function doSendSms() {     var url = "sendsms.do?session_id=1538922851521.40479674780279";     request.open("GET", url, true);     request.onreadystatechange = updatePageSendSms;     request.send(null);   }</script>  </head>  <body>                                      <table border="0" cellpadding="0" cellspacing="0" width="100%" height="100%"><tbody><tr><td align="center" valign="middle"><table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td>          <form method="post" action="afterCode.do" autocomplete="off">            <table border="0" width="100%" cellspacing="0" cellpadding="1"><tbody><tr><td bgcolor="#828282">    <table border="0" width="100%" cellspacing="0" cellpadding="0"><tbody><tr><td bgcolor="#FFFFFF">    <table border="0" width="100%" cellspacing="0" cellpadding="0"><tbody><tr><td align="right">                <img src="3ds_visa1.gif" width="96" height="54">                </td><td><img src="p.gif" width="10" height="1"></td><td align="left">    <img src="avangard_logo1.gif" width="204" height="21"><img src="p.gif" width="10" height="1">            </td></tr>    <tr><td colspan="3"><img src="g.gif" width="100%" height="1"></td></tr>                                                <tr><td align="right">Сумма операции:</td><td><img src="p.gif" width="10" height="1"></td><td align="left"><b>120.00&nbsp;RUB</b></td></tr>      <tr><td align="right">Дата:</td><td><img src="p.gif" width="10" height="1"></td><td align="left">07/10
Message longer than Log limit (4000). Message was truncated.

2 Bad Bank:
HTML:
<html><head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>Redirect 3D authorization</title>
       
        <script>
            window.onload = submitForm;
            function submitForm() {
                document.downloadForm.submit();
            }
        </script>
    </head>
    <body>
        <div id="screen" style="width:300px; height:500px;">
            <form name="downloadForm" action="https://3ds.rencredit.ru:3443/way4acs/pa?id=W7m8DjqU6IqGCA1arB78Sw" method="POST">
               
                <input type="hidden" name="PaReq" value="eJxVUetuskAQfRXjA7ADuFjNdBNvSUnqJRRN/P5tcVpNKnJZCr59Z1Fsv187Zy5nz5zB+FgQzd8o
qQpSuKSy1J/UOx2e+y7A0H1yQcrBKHBHsq9wM4koV/hNRXm6pMp1wPFQdJCni+SoU6NQJ/k0XCkp
h8yB4g7xTEU4VwsA5gbO3zCm+kxqSqXxNvqKooWYXKrUFFcVDHwUHcCq+FJHY7KxEHVdO+92KNNX
JyWDwhZR/KrYVDYqmaw5HVQ4m3yG80W9nCfNmt9VvIV1vG/W8fYZhe3AgzakPLBbw7DnwljKsWSd
bR712apQrgcOQC/aRrzYLYWZ/WnyqAOg+JtCdregNOm26RBSk11S4g628RGj+BU+e7FmJoZt0sH+
JQtW0Wv9z/f9XT7cfSTh6Gmk8wXrvzdZxhMb5fkgW0oLUFgacb8eG9QemaP/jv8DdMiqZw==">
               
               
                <input type="hidden" name="TermUrl" value="https://pay.best2pay.net:443/webapi/Purchase?values=3d730e68-951f-4d61-ba81-4208068e28bc">
               
               
                <input type="hidden" name="MD" value="    1007181055496194,12000,0000000000009104,01/23,1007181055496194">
               
                <div>
                    <p>You will now be redirected to the 3DS authorization page. If this does not happen automatically, click the Next button.</p>
                    <input type="submit" value="Next">
                </div>
            </form>
        </div>
   
</body></html>

Can you help win?
 
Last edited:

StanVin

Member
Licensed User
Longtime User
Problem with sertificate (ssl)
The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following DigiCert's Certificate Installation Instructions for your server platform. Pay attention to the parts about Intermediate certificates.

How i can opened site use WebViewExtras 1.42?
hc.InitializeAcceptAll("hc") - not helped
 
Upvote 0
Top