Skip to content

Strange payload sent from apple #4

@nashihu

Description

@nashihu

hello, i was able to create endpoint like done.php to nodejs version

the benchmark i use is from udid.tech api

Image

notice that my api can also process the same payload with same status code and redirect url

Image

but when i deploy it to netlify, start profile installation, i got A connection to the server could not be established

after checking netlify logs, i got payload that is not an xml version, just a random string

Image
here the complete string
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

here my site http://ahmad-nashihuddien.netlify.app/get-ios-udid

and here my source code inside folder get-ios-udid https://github.com/nashihu/nashihu.github.io

do you have idea why? thankyou

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions