[pacaro]

Dropbox posted a blog article about their approach to this issue in May — https://blog.dropbox.com/2014/05/web-vulnerability-affecting...

Disclaimer: I work for Dropbox