Resolving Unresponsive Sony Unsubscribe Page via API Bypass

Issue Description

The Sony unsubscription page, hosted on the Tencent Cloud SES (Simple Email Service) infrastructure, failed to load or function correctly. The webpage remained stuck on a blank screen.

  • URL: https://sescache.intl.tencent-cloud.com/prod_html/Unsubscribe3.html?region=hk&language=1&upn=[USER_TOKEN]

  • Screenshot of the issue: Screenshot reference

Analysis

Upon inspecting the HTML source code provided, the following architectural issues and logic were identified:

  • External Dependencies: The page relies on external assets from cdn.bootcdn.net (jQuery, jquery-confirm, Bootstrap)

  • Region-Based Routing: The script uses a domain mapping object to route requests based on the region parameter in the URL. For this specific case, the region was set to hk (Hong Kong).

  • Core Logic: The actual unsubscription is not handled by the UI itself but by a simple HTTP GET request to a webhook endpoint:

    const cf = $.confirm({
            title: "",
            content: '<div>'+str+'</div>',
            buttons: {
                confirm: {
                    text: confirmText,
                    btnClass: "btn-primary text",
                    action: function () {
                        $.get(domain[getUrlParam('region') || 'test'] + '/api/webhook?upn=' + getUrlParam('upn'), function () {
                            cf.close()
                            const al = $.alert({
                                title: "",
                                content: resStr,
                                buttons: {
                                    ok: {
                                        action:()=>{
                                            window.close();
                                        }
                                    }
                                }
                            });
                        })
                    }
                },
                cancel: {
                    text: cancelText,
                    btnClass: "text",
                    action: function () {
                        window.close();
                    }
                }
            },
            ... ...

Workaround

  • Solution 1: Console Injection: Execute a fetch request directly in the Console to simulate the “Confirm” button action:

    let endpoint_url =
  domain[getUrlParam("region")] + "/api/webhook?upn=" + getUrlParam("upn");

fetch(endpoint_url, { method: "GET", mode: "no-cors" })
  .then(() => console.log("Unsubscribe signal sent successfully."))
  .catch((err) => console.error("API Call Failed:", err));

    Note: Since the endpoint may not support CORS, using mode: no-cors in fetch ensures the request is dispatched even if the response content is opaque.

    Screenshot reference

  • Solution 2: Trigger the direct hyperlink to the API endpoint “unsubscribe” hook via any browser

References

  • Original Sony Unsubscribe Page URL: https://sescache.intl.tencent-cloud.com/prod_html/Unsubscribe3.html?region=hk&language=1&upn=[USER_TOKEN]

  • Script Archive:

    const domain = {
  test: "https://test-callback.qcloudmail.com",
  sg: "https://sg-callback.qcloudmail.com",
  hk: "https://hk-callback.qcloudmail.com",
  gz: "https://gz-callback.qcloudmail.com",
};
function getUrlParam(name) {
  var query = window.location.search.substring(1);
  var vars = query.split("&");
  for (var i = 0; i < vars.length; i++) {
    var pair = vars[i].split("=");
    if (pair[0] == name) {
      return pair[1];
    }
  }
  return false;
}
function confirmAndQuit() {
  var str;
  var resStr;
  let rtl = false;
  let confirmText = "确认";
  let cancelText = "取消";

  if (getUrlParam("language") == "1") {
    if (
      getUrlParam("region") == "test" ||
      getUrlParam("region") == "hk" ||
      getUrlParam("region") == "gz"
    ) {
      str = "您确定要取消订阅吗?";
      resStr = "取消订阅成功!";
    } else {
      str = "Are you sure to unsubscribe?";
      resStr = "Unsubscribe successfully!";
      confirmText = "Confirm";
      cancelText = "Cancel";
    }
  } else if (getUrlParam("language") == "2") {
    if (
      getUrlParam("region") == "test" ||
      getUrlParam("region") == "hk" ||
      getUrlParam("region") == "gz"
    ) {
      str = "Are you sure to unsubscribe?";
      resStr = "Unsubscribe successfully!";
      confirmText = "Confirm";
      cancelText = "Cancel";
    } else {
      str = "您确定要取消订阅吗?";
      resStr = "取消订阅成功!";
    }
  } else if (getUrlParam("language") == "3") {
    str = "您確定要取消訂閱嗎？";
    resStr = "取消訂閱成功!";
    confirmText = "確認";
    cancelText = "取消";
  } else if (getUrlParam("language") == "4") {
    str = "¿Estás seguro de que quieres cancelar la suscripción?";
    resStr = "Cancelación de suscripción exitosa!";
    confirmText = "Confirmar";
    cancelText = "Cancelar";
  } else if (getUrlParam("language") == "5") {
    str = "Êtes-vous sûr de vouloir vous désabonner?";
    resStr = "Désabonnement réussi!";
    confirmText = "Confirmer";
    cancelText = "Annuler";
  } else if (getUrlParam("language") == "6") {
    str = "Sind Sie sicher, dass Sie das Abonnement kündigen möchten?";
    resStr = "Abonnement erfolgreich gekündigt!";
    confirmText = "Bestätigen";
    cancelText = "Abbrechen";
  } else if (getUrlParam("language") == "7") {
    str = "購読をキャンセルしてもよろしいですか?";
    resStr = "購読のキャンセルが完了しました!";
    confirmText = "確認する";
    cancelText = "キャンセルする";
  } else if (getUrlParam("language") == "8") {
    str = "구독을 취소하시겠습니까?";
    resStr = "구독 취소가 완료되었습니다!";
    confirmText = "확인하다";
    cancelText = "취소하다";
  } else if (getUrlParam("language") == "9") {
    str = "هل أنت متأكد من رغبتك في إلغاء الاشتراك؟";
    resStr = "تم إلغاء الاشتراك بنجاح";
    confirmText = "تأكيد";
    cancelText = "إلغاء";
    rtl = true;
  } else if (getUrlParam("language") == "10") {
    str = "คุณแน่ใจหรือไม่ว่าคุณต้องการยกเลิกการสมัครสมาชิก?";
    resStr = "ยกเลิกการสมัครสมาชิกสำเร็จ!";
    confirmText = "ยืนยัน";
    cancelText = "การยกเลิก";
  } else {
    if (
      getUrlParam("region") == "test" ||
      getUrlParam("region") == "hk" ||
      getUrlParam("region") == "gz"
    ) {
      str = "您确定要取消订阅吗?";
      resStr = "取消订阅成功!";
    } else {
      str = "Are you sure to unsubscribe?";
      resStr = "Unsubscribe successfully!";
      confirmText = "Confirm";
      cancelText = "Cancel";
    }
  }

  const cf = $.confirm({
    title: "",
    content: "<div>" + str + "</div>",
    buttons: {
      confirm: {
        text: confirmText,
        btnClass: "btn-primary text",
        action: function () {
          $.get(
            domain[getUrlParam("region") || "test"] +
              "/api/webhook?upn=" +
              getUrlParam("upn"),
            function () {
              cf.close();
              const al = $.alert({
                title: "",
                content: resStr,
                buttons: {
                  ok: {
                    action: () => {
                      window.close();
                    },
                  },
                },
              });
            }
          );
        },
      },
      cancel: {
        text: cancelText,
        btnClass: "text",
        action: function () {
          window.close();
        },
      },
    },
    width: "auto",
    theme: "white",
    animation: "zoom",
    closeAnimation: "scale",
    animationSpeed: 500,
    animationBounce: 1.2,
    keyboardEnabled: false,
    rtl,
    container: "body",
    backgroundDismiss: false,
    autoClose: false,
    columnClass:
      "col-md-4 col-md-offset-4 col-sm-6 col-sm-offset-3 col-xs-10 col-xs-offset-1",
  });
}
comments powered by Disqus