TikTok Ads ByteReplay arbitrary-origin bridge PoC

This static page opens an authenticated TikTok Ads route and initiates the bytereplay.bridging protocol from an unrelated Cloudflare Pages origin. It does not need, store, or transmit cookies.

Authorized test only. The optional webhook proof sends the bridge-disclosed user_id and adv_id, route, and non-secret recorder metadata. It never sends cookies, CSRF values, recorder tokens, or raw recorder options.

Controlled advertiser/account ID Authenticated target route Optional researcher-controlled webhook URL Send one minimal identifier proof to the webhook after a live streaming recorder message arrives

Not started.

Success is receipt of live InitRecorder and StartRecording (streaming-http) messages from https://ads.tiktok.com. That is the arbitrary-origin bridge disclosure.

Why this Cloudflare proof does not receive the full replay

TikTok Ads' observed CSP permits connections to *.amazonaws.com, but ordinary Cloudflare deployment hosts such as *.pages.dev, *.workers.dev, and *.r2.dev are not permitted upload destinations. Cloudflare can host this opener PoC, but a full replay receiver must use a hostname allowed by the target document's current CSP.

Open the advanced recorder-redirection PoC