I did a quick test on Soti Surf, and found that it supports the WebRTC API, and can therefore do QR code scan as in Chrome and some other web browsers.

However, please note that I also found the QR image I got above was a horizontal mirror-image of the real one in both Soti Surf and Chrome.  I didn't bother to spend time disabling the horizontal mirroring parameter configurable in this test web-app, as long as the WebRTC API has already been confirmed to be working on Soti Surf.

Thanks for your attention. I still can't open the camera to read. Have some permission that I need to give?

You need to allow camera permission for Soti Surf.  Also, the "disallow camera" option of feature control should not be selected if there is any feature control payload assigned to the device. 

I'm so sorry but I still can't open, even the link you tested (schmich.github.io/instascan/). I can't on Surf and with a common https request on lockdown. My wish is set a device on kiosk mode and be able to read QR Code. Can I do this? Appreciate.

Have you deployed the Soti-Surf payload?  What did you configure in it?  What error(s) did you see on your device screen?