I'm just cross-posting my SO question here, in case someone here has the expertise and can handle answering it in both places at once.
http://stackoverflow.com/questions/37731412/dropbox-chooser-direct-links-docs-say-they-use-cors-but-i-get-access-control-e
Thanks Nathan! We'll take a look and reply there.