Custom Sheet and Fire Emblem Tabletop Combat Script not gelling

I've been working with a friend to expand the roster of classes available and just generally clean up the sheet for the FE TTRPG, and it worked for a bit before this error began to crop up:  After this came up, the sheets haven't been working properly, even when restoring back to old code we used that had worked initially. This seems to be an internal issue with the Custom Sheet when linking up with the FETT Combat Script API. The reason I say this is because I've gone and made an entirely new Pro profile on Roll20 and this has followed me like a ghost. We've seen forum posts that had issues similar to this, but none of the proposed fixes worked in our case. I've submitted a Help Request to Roll20 proper, but if anyone's got any idea on what's what, any help would be truly appreciated.

I'd recommend checking the dev console in your game to see if your sheet is throwing an error.

How do I access the dev console?

right click anywhere on your sheet and select "inspect". Then navigate to the "console" tab at the top of the window that shows up (note the window might show up as a separate window, or a "docked" window on the side/bottom of your browser depending on your browser settings)

Thank you, I pulled it up and it clocked 8 errors. I am not a smart man when it comes to tech or code. Is there a way for me to fix these errors?

Depends what the errors are. There's some that are normal, but you'd need to copy them here.

Alright, here they are then: 1)&nbsp; Refused to load the script '<a href="https://bat.bing.com/bat.js" rel="nofollow">https://bat.bing.com/bat.js</a>' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. nc @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:135 2)&nbsp; Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Either the 'unsafe-inline' keyword, a hash ('sha256-77bgQblnRaKk1m8aq2FHqKiER4ywljc0EoTvK4RBca4='), or a nonce ('nonce-...') is required to enable inline execution. f.aa @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:108 3)&nbsp; Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Either the 'unsafe-inline' keyword, a hash ('sha256-ZdDTEfl8xrGn7iZ/2mMDizDIe6JRmep2vz9STHJi4Zs='), or a nonce ('nonce-...') is required to enable inline execution. f.aa @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:108 4)&nbsp; Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Either the 'unsafe-inline' keyword, a hash ('sha256-T7lR+ibvQarg3W9mbFJwhc8qOfagddrVEM59s6xPa8M='), or a nonce ('nonce-...') is required to enable inline execution. f.aa @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:108 5)&nbsp;Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure font '<a href="http://imgsrv.roll20.net/?src=imgsrv.roll20.net/%3Fsrc%3Dimgsrv.roll20.net/%253Fsrc%253Dimgsrv.roll20.net/%25253Fsrc%25253Dimgsrv.roll20.net/%2525253Fsrc%2525253Dimgsrv.roll20.net/%252525253Fsrc%252525253Dimgsrv.roll20.net/%25252525253Fsrc%25252525253Dimgsrv.roll20.net/%2525252525253Fsrc%2525252525253Dimgsrv.roll20.net/%252525252525253Fsrc%252525252525253Dimgsrv.roll20.net/%25252525252525253Fsrc%25252525252525253Dimgsrv.roll20.net/%2525252525252525253Fsrc%2525252525252525253Dimgsrv.roll20.net/%252525252525...52525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dimgsrv.roll20.net/%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dfonts.gstatic.com/s/merriweather/v17/ZvcMqxEwPfh2qDWBPxn6nk4GofcKVZz6wtzX_QUIqsI.woff2" rel="nofollow">http://imgsrv.roll20.net/?src=imgsrv.roll20.net/%3Fsrc%3Dimgsrv.roll20.net/%253Fsrc%253Dimgsrv.roll20.net/%25253Fsrc%25253Dimgsrv.roll20.net/%2525253Fsrc%2525253Dimgsrv.roll20.net/%252525253Fsrc%252525253Dimgsrv.roll20.net/%25252525253Fsrc%25252525253Dimgsrv.roll20.net/%2525252525253Fsrc%2525252525253Dimgsrv.roll20.net/%252525252525253Fsrc%252525252525253Dimgsrv.roll20.net/%25252525252525253Fsrc%25252525252525253Dimgsrv.roll20.net/%2525252525252525253Fsrc%2525252525252525253Dimgsrv.roll20.net/%252525252525...52525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dimgsrv.roll20.net/%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dfonts.gstatic.com/s/merriweather/v17/ZvcMqxEwPfh2qDWBPxn6nk4GofcKVZz6wtzX_QUIqsI.woff2</a>'. This request has been blocked; the content must be served over HTTPS. 6)&nbsp; Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Either the 'unsafe-inline' keyword, a hash ('sha256-F/cDWXaljtAzxkboYPXxVpygl3SB04hTtjEOOBtilWA='), or a nonce ('nonce-...') is required to enable inline execution. (anonymous) @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:610 7)&nbsp; Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-PyJ7A8yKxXeMumte' 'nonce-hAxeYqHl2FVmdnpn' <a href="https://cdn.roll20.net" rel="nofollow">https://cdn.roll20.net</a> blob: <a href="https://www.datadoghq-browser-agent.com" rel="nofollow">https://www.datadoghq-browser-agent.com</a> <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com https://*.fullstory.com <a href="https://www.googletagmanager.com" rel="nofollow">https://www.googletagmanager.com</a> https://*.refiner.io https://*.maze.co". Either the 'unsafe-inline' keyword, a hash ('sha256-VussMEcsqEPalla4i7RvpHqvRE4+2WmSh4DL2kBzaD4='), or a nonce ('nonce-...') is required to enable inline execution. (anonymous) @ gtm.js?id=GTM-MKL9HM6&amp;gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&amp;gtm_preview=env-1&amp;gtm_cookies_win=x:610 8)&nbsp; Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure font '<a href="http://imgsrv.roll20.net/?src=imgsrv.roll20.net/%3Fsrc%3Dimgsrv.roll20.net/%253Fsrc%253Dimgsrv.roll20.net/%25253Fsrc%25253Dimgsrv.roll20.net/%2525253Fsrc%2525253Dimgsrv.roll20.net/%252525253Fsrc%252525253Dimgsrv.roll20.net/%25252525253Fsrc%25252525253Dimgsrv.roll20.net/%2525252525253Fsrc%2525252525253Dimgsrv.roll20.net/%252525252525253Fsrc%252525252525253Dimgsrv.roll20.net/%25252525252525253Fsrc%25252525252525253Dimgsrv.roll20.net/%2525252525252525253Fsrc%2525252525252525253Dimgsrv.roll20.net/%252525252525...52525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dimgsrv.roll20.net/%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dfonts.gstatic.com/s/merriweather/v17/ZvcMqxEwPfh2qDWBPxn6nk4GofcKVZz6wtzX_QUIqsI.woff2" rel="nofollow">http://imgsrv.roll20.net/?src=imgsrv.roll20.net/%3Fsrc%3Dimgsrv.roll20.net/%253Fsrc%253Dimgsrv.roll20.net/%25253Fsrc%25253Dimgsrv.roll20.net/%2525253Fsrc%2525253Dimgsrv.roll20.net/%252525253Fsrc%252525253Dimgsrv.roll20.net/%25252525253Fsrc%25252525253Dimgsrv.roll20.net/%2525252525253Fsrc%2525252525253Dimgsrv.roll20.net/%252525252525253Fsrc%252525252525253Dimgsrv.roll20.net/%25252525252525253Fsrc%25252525252525253Dimgsrv.roll20.net/%2525252525252525253Fsrc%2525252525252525253Dimgsrv.roll20.net/%252525252525...52525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dimgsrv.roll20.net/%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Fsrc%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253Dfonts.gstatic.com/s/merriweather/v17/ZvcMqxEwPfh2qDWBPxn6nk4GofcKVZz6wtzX_QUIqsI.woff2</a>'. This request has been blocked; the content must be served over HTTPS. curCSS @ jquery-1.9.1.js:6934 And then this was also marked: <a href="https://api.refiner.io/js-client/v1/2c1bbc00-fd44-11ec-a959-1398520e701a/ping" rel="nofollow">https://api.refiner.io/js-client/v1/2c1bbc00-fd44-11ec-a959-1398520e701a/ping</a> 429

ok, 1 - 8 are all ones you can ignore and are caused by your browser's settings not allowing some scripts on Roll20 to run (mostly data collection scripts I believe). The last one isn't one I've seen before, but is likely due to the API crashing. So, it looks like you've probably got something in your script that is causing an invalid call to the R20 resources.

Okay, good to hear there at least. The image attached was also below the last error, it wasn't copy pasted for some reason, but maybe it'll shed some more light. As for the API being what's screwing up, that would line up with what I've seen, it's just some intrinsic link between the Custom Sheet option and this specific API. The normal sheet provided by the original devs still works as intended with this API thankfully. dn @ datadog-rum.js:1 (anonymous) @ client.js:1 e.exports @ client.js:1 e.exports @ client.js:8 Promise.then (async) u.request @ client.js:8 o.forEach.u.&lt;computed&gt; @ client.js:8 (anonymous) @ client.js:1 Fe @ client.js:1 ne @ client.js:1 (anonymous) @ client.js:1