Bug Report: When I select a file to upload into my Library for tokens, the file uploads, but the image appears as a broken image file in the Library and I cannot use it in my games. This happens when I upload the file using the Browse Folder button or the drag-and-drop method. I attempt to upload a file and it comes up as a broken image as above. Your computer's settings (A good place to find this info if you don't know it is Support Details ): Web Browser - Google Crome Browser Version - Version 44.0.2403.107 m Operating System - Windows Windows Vista Javascript - enabled Anti-virus software - Microsoft Security Essentials List of any browser add-ons or extensions enabled - None You can optionally include screenshots by using the "Attach a File" link when submitting a post. A Console Log from the moment you logged into the page through when you encountered the issue. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-N4rT-GhE0K4LJ4zTB64Bkmk5xSsA8M7MPSk1qY82nAQ='), or a nonce ('nonce-...') is required to enable inline execution. app.js?1437884211:29 70 app.js?1437884211:29 TOUCH SUPPORTED: false app.js?1437884211:29 USING WEBGL ACCELERATION... app.js?1437884211:29 WEBGL STARTUP SUCCESS app.js?1437884211:24 select app.js?1437884211:24 Switch mode to select app.js?1437884211:39 Initializing new dice engine with randomness... app.js?1437884211:39 Using random entropy app.js?1437884211:42 Compiling sheet... app.js?1437884211:42 Found rolltemplate: 5eDefault app.js?1437884211:42 Finding sheet rolls... app.js?1437884211:43 window resize app.js?1437884211:30 Final set zoom! app.js?1437884211:29 UPDATE GL SIZE! app.js?1437884211:30 Final set zoom! tutorial_tips.js:7 tuts loaded app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/4725LWH.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/4725LWH.png</a>'. This content should also be served over HTTPS. app.js?1437884211:35 Final page load. app.js?1437884211:35 Auth'ed. app.js?1437884211:35 Go post auth! app.js?1437884211:35 initial setup app.js?1437884211:35 Got players value... app.js?1437884211:35 joining game... app.js?1437884211:33 Player -Jp6p9N8mnPGsGtHqhup is offline... app.js?1437884211:33 Player -JpJ3HryZWxF7Esk53b1 is offline... app.js?1437884211:33 Player -JpTxzhJoknq98yBV8RK is offline... app.js?1437884211:33 Player -Jq4fZLMlgU7SDLe4RUL is offline... app.js?1437884211:33 Player -JtYvfT2VoqBZ1R80Pw5 is offline... app.js?1437884211:33 Player -Jty3naCMp3Rs3DcUgY5 is offline... app.js?1437884211:33 Player -Jv6C74O1-QbLz-xU3wz is offline... app.js?1437884211:35 Deferred finish joining... app.js?1437884211:29 Firebase Online app.js?1437884211:33 I think I should be first? app.js?1437884211:33 FIRST PLAYER: -Jp6p9N8mnPGsGtHqhup app.js?1437884211:38 refershing page listings! 8app.js?1437884211:32 Full load page! app.js?1437884211:35 We have 20 pages app.js?1437884211:42 Refresh Journal List! app.js?1437884211:42 Search took 9ms app.js?1437884211:35 Scan for new plays! app.js?1437884211:35 handle page changes app.js?1437884211:35 false app.js?1437884211:35 init active page! app.js?1437884211:33 activate page! app.js?1437884211:33 FULLY ACTIVATE VIEWS FOR PAGE. app.js?1437884211:41 initiatlizing video chat app.js?1437884211:41 Connecting to WebRTC <a href="https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?14379147245" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?14379147245</a> Failed to load resource: the server responded with a status of 403 (Forbidden) <a href="https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?14379149125" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?14379149125</a> Failed to load resource: the server responded with a status of 403 (Forbidden) app.js?1437884211:32 Graphics: 53 app.js?1437884211:32 Paths: 44 app.js?1437884211:31 Do refresh link cache! app.js?1437884211:38 refershing page listings! app.js?1437884211:42 Refresh Journal List! app.js?1437884211:42 Search took 59ms app.js?1437884211:32 Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/5226283/xrwo2sBEFFQv7qcY6mTxrg/thumb.jpg?14084222635" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/5226283/xrwo2sBEFFQv7qcY6mTxrg/thumb.jpg?14084222635</a> to <a href="https://s3.amazonaws.com/files.d20.io/images/5226283/xrwo2sBEFFQv7qcY6mTxrg/max.jpg?14084222635" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/5226283/xrwo2sBEFFQv7qcY6mTxrg/max.jpg?14084222635</a> app.js?1437884211:28 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?1437914724" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?1437914724</a> app.js?1437884211:28 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?1437914912" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?1437914912</a> app.js?1437884211:33 Reorder by ZORDER 7app.js?1437884211:36 Updating character sheet values app.js?1437884211:33 Reorder by ZORDER app.js?1437884211:36 Updating character sheet values app.js?1437884211:32 setting src app.js?1437884211:36 Updating character sheet values app.js?1437884211:28 Cols: 2 Rows: 1 app.js?1437884211:28 Took 1ms to generate cache. 2app.js?1437884211:36 Updating character sheet values <a href="https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?1437914724" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068322/MHkwfFRAwjooQITroVbr9A/thumb.gif?1437914724</a> Failed to load resource: the server responded with a status of 403 (Forbidden) <a href="https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?1437914912" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11068365/OSQ2Ml-mxlYn2qFcck53sw/thumb.gif?1437914912</a> Failed to load resource: the server responded with a status of 403 (Forbidden) app.js?1437884211:36 Updating character sheet values app.js?1437884211:41 Connected to session app.js?1437884211:41 Someone just connected. app.js?1437884211:41 It's us? 14app.js?1437884211:36 Updating character sheet values v2.js:1 Mixed Content: The page at '<a href="https://marketplace.roll20.net/library/?inapp=true" rel="nofollow">https://marketplace.roll20.net/library/?inapp=true</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://app.roll20.net/js/textboxlist/close.gif" rel="nofollow">http://app.roll20.net/js/textboxlist/close.gif</a>'. This content should also be served over HTTPS. v2.js:15 13769098 v2.js:15 Uploading a size: 100x100 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 0 v2.js:15 Uploading a size: 200x200 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 20 v2.js:15 Uploading a size: 512x512 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 40 v2.js:15 Uploading a size: 2048x2048 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 60 v2.js:15 Uploading a size: 10000x10000 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 80 yourlibrary.js:247 [object Object] <a href="https://s3.amazonaws.com/files.d20.io/images/11072395/GFfJ687bp_4KiDjXkesIKw/thumb.gif?1437922707" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/11072395/GFfJ687bp_4KiDjXkesIKw/thumb.gif?1437922707</a> Failed to load resource: the server responded with a status of 403 (Forbidden) yourlibrary.js:101 [object Object] v2.js:1 Mixed Content: The page at '<a href="https://marketplace.roll20.net/library/?inapp=true" rel="nofollow">https://marketplace.roll20.net/library/?inapp=true</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://app.roll20.net/js/textboxlist/close.gif" rel="nofollow">http://app.roll20.net/js/textboxlist/close.gif</a>'. This content should also be served over HTTPS. v2.js:15 DROP ON FILE UPLOAD v2.js:15 13769115 v2.js:15 Uploading a size: 100x100 v2.js:15 Reader load! v2.js:15 img load! v2.js:15 200 v2.js:15 0 v2.js:15 Uploading a size: 200x200 v2.js:15 Reader load! v2.js:15 img load!