CORS in the Dropbox API

Dropbox provides the simple storage of files, which may be shared via preview/download links. CORS is supported for direct links in the Dropbox chooser, which allows you to read the file information directly in the browser using client-side JavaScript. Direct links should not be used to display content directly in the browser. Direct links point directly to the contents of the file and are useful for downloading the file itself. Unlike Preview Links, they expire after four hours, so make sure to download the contents of the file immediately after the file is chosen.

Refer to the Dropbox documentation for more information on using chooser: .

Support for simple requests using simple headers via CORS, including support for XdomainRequest, is provided in dropbox.js in the src/util/xhr.coffee file. dropbox.js is the unofficial JavaScript library for the Dropbox core API:

  # Using the header names listed at
  # http://www.w3.org/TR/cors/#simple-response-header
  # and the...