I'd repeated it on both Chrome (44) and Firefox (39) on Ubuntu 14.04, and Chrome on ChromeOS (latest version). On Firefox I cleared the cache and disabled all plugins. The result is pretty similar (it's actually slightly different, but the map's changed a bit since the original screen shot (it's now about twice as big plus a few extra obstructions) and the basic problem is the same). Javascript is enabled, the only plugin is AdBlock (none on Firefox), and I'm not running anti-virus. The output from the javascript console: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> https://*.googlesyndication.com https://*.firebaseio.com https://*.googlesyndication.com https://*.opentok.com https://*.googlesyndication.com <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-zPG-K4I9mI5N_X3w1nw5HPEIKGgryJjJEQUnrL1b3M8='), or a nonce ('nonce-...') is required to enable inline execution. Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> https://*.googlesyndication.com https://*.firebaseio.com https://*.googlesyndication.com https://*.opentok.com https://*.googlesyndication.com <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-N4rT-GhE0K4LJ4zTB64Bkmk5xSsA8M7MPSk1qY82nAQ='), or a nonce ('nonce-...') is required to enable inline execution. 70 TOUCH SUPPORTED: false USING WEBGL ACCELERATION... WEBGL STARTUP SUCCESS select Switch mode to select Initializing new dice engine with randomness... Using random entropy window resize Final set zoom! UPDATE GL SIZE! Final set zoom! tuts loaded Final page load. Auth'ed. Go post auth! initial setup refershing page listings! Got players value... joining game... I think I should be first? FIRST PLAYER: -JBqDvi8Pe0zzJ8v6jtv Player -JGT_vhkaKfIdFA5FxiZ is offline... Player -JGU1suUdbbywuKhyTMV is offline... Player -JGf60WvrByCCq8VIhYz is offline... Player -JGu4V02xnOA1bQGr5vx is offline... Player -JHOUW6xEZlA_kb4yDto is offline... Player -JHT6g3gDNcvOV2a2O1_ is offline... Player -JHT7NTgFztKqHIxJ9ys is offline... Player -JRKmeBgMFXAQr9O5n-u is offline... Player -J_ltHEAO7dDlhPDXzhL is offline... Player -JaBIFBb9DwY299IF3M0 is offline... Deferred finish joining... Firebase Online Refresh Journal List! Search took 6ms Scan for new plays! Full load page! We have 36 pages initiatlizing video chat Connecting to WebRTC handle page changes false init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Graphics: 0 Paths: 0 Reorder by ZORDER refershing page listings! GET <a href="https://s3.amazonaws.com/files.d20.io/images/6463" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6463</a>... 403 (Forbidden) Do refresh link cache! Refresh Journal List! Search took 147ms Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://fc03.deviantart.net/fs70/f/2012/032/e/4/female_wizard___01_by_aditya777-d4oaidm.jpg" rel="nofollow">http://fc03.deviantart.net/fs70/f/2012/032/e/4/female_wizard___01_by_aditya777-d4oaidm.jpg</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://fc02.deviantart.net/fs71/i/2013/036/a/6/hobgoblin_infantry_by_jubjubjedi-d56jglf.jpg" rel="nofollow">http://fc02.deviantart.net/fs71/i/2013/036/a/6/hobgoblin_infantry_by_jubjubjedi-d56jglf.jpg</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://fc00.deviantart.net/fs70/f/2010/350/f/4/green_dragon_by_isismasshiro-d34zfgt.jpg" rel="nofollow">http://fc00.deviantart.net/fs70/f/2010/350/f/4/green_dragon_by_isismasshiro-d34zfgt.jpg</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://static2.wikia.nocookie.net/__cb20090217202617/forgottenrealms/images/5/5b/Hill_giant_-_Jason_Engle.jpg?1404422738" rel="nofollow">http://static2.wikia.nocookie.net/__cb20090217202617/forgottenrealms/images/5/5b/Hill_giant_-_Jason_Engle.jpg?1404422738</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://fc02.deviantart.net/fs71/i/2013/036/a/6/hobgoblin_infantry_by_jubjubjedi-d56jglf.jpg" rel="nofollow">http://fc02.deviantart.net/fs71/i/2013/036/a/6/hobgoblin_infantry_by_jubjubjedi-d56jglf.jpg</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://chaosorc.com/images/UNH09_Stone_Giant_Runecarver.jpg?1404424135" rel="nofollow">http://chaosorc.com/images/UNH09_Stone_Giant_Runecarver.jpg?1404424135</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/#" rel="nofollow">https://app.roll20.net/editor/#</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://fc00.deviantart.net/fs70/f/2010/350/f/4/green_dragon_by_isismasshiro-d34zfgt.jpg" rel="nofollow">http://fc00.deviantart.net/fs70/f/2010/350/f/4/green_dragon_by_isismasshiro-d34zfgt.jpg</a>'. This content should also be served over HTTPS. Connected to session Someone just connected. It's us? Someone just connected. It's us? Someone just connected. It's us? Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1084" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1084</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1084" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1084</a>... Reorder by ZORDER setting src Cols: 2 Rows: 3 Took 0ms to generate cache. Updating character sheet values init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Graphics: 62 Paths: 120 new caster! Reorder by ZORDER Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1087" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1087</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1087" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1087</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/3203" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3203</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/3203" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3203</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/6757" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6757</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/6757" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6757</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1418" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1418</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1418" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1418</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1714" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1714</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1714" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1714</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/6944" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6944</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/6944" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6944</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... refershing page listings! setting src Reorder by ZORDER setting src GET <a href="https://s3.amazonaws.com/files.d20.io/images/6463" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6463</a>... 403 (Forbidden) setting src Final set zoom! [1017.5, 459] UPDATE GL SIZE! Debounced init page! init active page! Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2767" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2767</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1087" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1087</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1087" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1087</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/6757" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6757</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/6757" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6757</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1418" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1418</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1418" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1418</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1714" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1714</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1714" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1714</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/6944" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6944</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/6944" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6944</a>... setting src refershing page listings! GET <a href="https://s3.amazonaws.com/files.d20.io/images/6463" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6463</a>... 403 (Forbidden) Final set zoom! [2159.9999999999995, 1148.9999999999998] UPDATE GL SIZE! Debounced init page! init active page! Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1337" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1337</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... setting src refershing page listings! GET <a href="https://s3.amazonaws.com/files.d20.io/images/6463" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/6463</a>... 403 (Forbidden) new lamp select Switch mode to select new lamp