Dropbox.com - Developers.dropbox.com

content-type: text/html;charset=utf-8
content-length: 0
location: https://www.dropbox.com/developers
date: Fri, 07 Nov 2025 19:43:02 GMT
server: Apache
x-dispatcher: dispatcher2uswest1-28645028
x-vhost: dropbox-prod.adobemsbasic.com
x-content-type-options: nosniff
cache-control: max-age=0
expires: Fri, 07 Nov 2025 19:43:02 GMT
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 3e7af1ef389db8ab4a319bd943f95544.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P13
x-amz-cf-id: oDtvwJwGB2tWUlu37lmcEQ8Jm5SCES7S_KiCiRbIY0iJP7ID5sf8yA==

HTTP/2 200 
content-security-policy: frame-ancestors 'self' ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; media-src https://* blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; default-src 'none' ; base-uri 'self' ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; img-src https://* data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:
content-type: text/html; charset=utf-8
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTg3MDQ3NTA2OTA4ODQ1NjQyNjU4MzkyNjc1NjU5MDU5NTcxNDc3; Path=/; Expires=Wed, 06 Nov 2030 19:43:02 GMT; HttpOnly; Secure; SameSite=None
set-cookie: t=bawW1hANA3ATz9oqIP_iSWKK; Path=/; Domain=dropbox.com; Expires=Sat, 07 Nov 2026 19:43:02 GMT; HttpOnly; Secure; SameSite=None
set-cookie: __Host-js_csrf=bawW1hANA3ATz9oqIP_iSWKK; Path=/; Expires=Sat, 07 Nov 2026 19:43:02 GMT; Secure; SameSite=None
set-cookie: __Host-ss=J_bmIgKPgQ; Path=/; Expires=Sat, 07 Nov 2026 19:43:02 GMT; HttpOnly; Secure; SameSite=Strict
set-cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Wed, 06 Nov 2030 19:43:02 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
date: Fri, 07 Nov 2025 19:43:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains
server: envoy
cache-control: no-cache, no-store
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: d48fc1351ad04b1ea769f959690e4bc6