Hello,
I am currently experiencing an issue during the App Review process related to a third-party payment integration using Toss Payments.
Our app loads a payment widget from an external script hosted at: https://js.tosspayments.com/v2/standard
In our local and production environments, the payment module works without any issues. However, in the App Review environment, the script appears to fail to load or initialize properly, resulting in an "Unknown Error" during payment widget initialization.
We suspect that the App Review environment may have network restrictions or firewall rules that block or limit access to this external CDN (AWS-based), preventing the script from being fetched.
We have already:
Verified that the script loads correctly in all non-review environments Submitted a video demonstrating the normal payment flow Contacted the payment provider, and they confirmed that there are no IP blocks or restrictions on their side
My questions are:
Does the App Review environment impose restrictions on external CDN domains or third-party scripts? If so, what is the recommended approach for handling payment SDKs that rely on external script loading? As a temporary workaround for review purposes, would it be acceptable to: Bypass the actual payment SDK Replace it with a mock or simplified flow (e.g., tapping the payment button immediately proceeds to a success screen) Restore the real payment integration after approval?
We want to ensure compliance with App Store guidelines while also resolving this review-specific issue efficiently.
Any guidance or similar experiences would be greatly appreciated.
Thank you!