Dropbox chooser: www.dropbox.com refused to connect.

ZoomDeveloper2

I have a test app for testing the Dropbox chooser. When I accesshttps://www.dropbox.com/chooser?app_key=gcwnony09i3xxxx&origin=xxxxxxxxx&link_type=preview&trigger=js&iframe=truethe console shows: Framing 'https://www.dropbox.com/' violates the following Content Security Policy directive: "frame-ancestors 'self'". The request has been blocked.It has worked for a long time, but now it no longer works. Please help.

Donal_M

Hi @ZoomDeveloper2

Thank you for reaching out.

The console error indicates that the Dropbox page being loaded is being blocked by Dropbox’s Content Security Policy, specifically the frame-ancestors 'self' directive. That policy means the page being returned is not permitted to be embedded inside an iframe on a non-Dropbox site.

For the Chooser, the supported integration path is the official Dropbox Chooser / Drop-ins JavaScript integration.

You can find the Chooser setup instructions here:

https://www.dropbox.com/developers/chooser

A few things to check:

1. Make sure you’re loading the official Dropbox Drop-ins script.
2. Trigger the Chooser from a user action, such as a button click.
3. Confirm the domain where your test app is hosted is registered correctly in the Dropbox app console.

If you’re already using the official Drop-ins integration and still seeing this issue, I’d recommend you open a ticket so our team can take a closer look at your app key, configured domain, and the exact Chooser flow being used.