three
The 3DS Requestor App URL. If the app sets the URL, then the SDK shall pass the URL in every CReq message (protocol version 2.2.0+).
The URL should contain the SDK Transaction ID so the issuer can correlate the out-of-band redirect with the current transaction.