HTTP/2 302 content-type: text/html; charset=utf-8 content-security-policy: sandbox location: /login?cont=https%3A%2F%2Fwww.dropbox.com%2Fdevelopers%2Fapps set-cookie: gvc=MTYyMTYyNDM0OTAyNDcyODcyMjU2ODQxMjI2MTk0NzUyNTUwNTQ2; expires=Tue, 23 Jul 2030 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: t=XaKnRyeeU3Cku1dTSC3_D2vV; Domain=dropbox.com; expires=Fri, 24 Jul 2026 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: __Host-js_csrf=XaKnRyeeU3Cku1dTSC3_D2vV; expires=Fri, 24 Jul 2026 18:01:53 GMT; Path=/; SameSite=None; Secure set-cookie: __Host-ss=U9eYl33uQQ; expires=Fri, 24 Jul 2026 18:01:53 GMT; HttpOnly; Path=/; SameSite=Strict; Secure set-cookie: bjar=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: blid=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: lid=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: jar=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: oscar=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: grouch=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: baklawa=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: malabi=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: __Secure-reseller_session=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: sm_auth=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: rl_auth=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: toaster=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: giraffe=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: db-help-center-uid=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: __Host-logged-out-session=; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: __Secure-untrusted_session=; Domain=dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: preauth=; Domain=www.dropbox.com; expires=Thu, 24 Jul 2025 18:01:53 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: toast=1:er%3APlease%20sign%20in%20or%20register%20to%20access%20this%20page.:OYNOuH9mzkw/NbkD6zNY4AlwtuEN8KmPl61GH4riH%2BY%3D; Domain=dropbox.com; Path=/; SameSite=None; Secure x-content-type-options: nosniff x-frame-options: SAMEORIGIN date: Thu, 24 Jul 2025 18:01:53 GMT server: envoy strict-transport-security: max-age=31536000; includeSubDomains strict-transport-security: max-age=31536000; includeSubDomains x-dropbox-trace-id: 20a5a3ced6f5418eb11eaedb1142c86f cache-control: no-cache, no-store alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 content-encoding: gzip vary: Accept-Encoding x-dropbox-response-origin: far_remote x-dropbox-request-id: 20a5a3ced6f5418eb11eaedb1142c86f HTTP/2 200 content-security-policy: default-src 'none' ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-Ie+kzHQSXBHMmezlJxq1958SijQ=' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; frame-ancestors 'self' ; base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; font-src https://* data: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; img-src https://* data: blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; media-src https://* blob: content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-Ie+kzHQSXBHMmezlJxq1958SijQ=' 'nonce-/a89DJgL1hJ/09XW+h0AXP5MKQY=' content-type: text/html; charset=utf-8 pragma: no-cache referrer-policy: strict-origin-when-cross-origin set-cookie: __Host-logged-out-session=ChAnmGq1MHbhmHsj14ckrfxEEJLqicQGGi5BTnZXU1FuM2VuR0R3UUFiWUhlVDRQa1lGaWFJY0R1YjRZWUNDb0NodzFxOUh3; Path=/; HttpOnly; Secure; SameSite=None set-cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Tue, 23 Jul 2030 18:01:54 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block date: Thu, 24 Jul 2025 18:01:54 GMT strict-transport-security: max-age=31536000; includeSubDomains server: envoy cache-control: no-cache, no-store alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 content-encoding: gzip vary: Accept-Encoding x-dropbox-response-origin: far_remote x-dropbox-request-id: 1d26b84d2a6047498767370c9f73036f