To replicate: Post a few lines of text with an image into roll20 and hit save. Steps 1-3 tested on both browsers with extensions disabled. Pasting or attaching .png 193KB and about 6 lines of text. Windows 7 x64 Firefox 63 and Chrome 70.0.3538.102 javascript enabled cookies enabled F-secure Security Suite 17.4 No addons in chrome Firefox: Noscript, Ghostry, Ad-block,<<-- disabled for testing. v2.js?1537287099:31 JQMIGRATE: Migrate is installed with logging active, version 3.0.0 0:94 Mixed Content: The page at ' <a href="https://app.roll20.net/forum/newtopic/3350320/0" rel="nofollow">https://app.roll20.net/forum/newtopic/3350320/0</a> ' was loaded over HTTPS, but requested an insecure image ' <a href="http://www.drivethrurpg.com/images/3401/245285-thumb140.jpg" rel="nofollow">http://www.drivethrurpg.com/images/3401/245285-thumb140.jpg</a> '. This content should also be served over HTTPS. v2.js?1537287099:31 JQMIGRATE: jQuery.fn.bind() is deprecated v2.js?1537287099:31 console.trace n @ v2.js?1537287099:31 bind @ v2.js?1537287099:31 (anonymous) @ browse.js?1530046280:603 h @ v2.js?1537287099:25 d @ v2.js?1537287099:25 setTimeout (async) (anonymous) @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 fire @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 ready @ v2.js?1537287099:25 d @ v2.js?1537287099:24 0:94 Mixed Content: The page at ' <a href="https://app.roll20.net/forum/newtopic/3350320/0" rel="nofollow">https://app.roll20.net/forum/newtopic/3350320/0</a> ' was loaded over HTTPS, but requested an insecure image ' <a href="http://www.drivethrurpg.com/images/3401/245285-thumb140.jpg" rel="nofollow">http://www.drivethrurpg.com/images/3401/245285-thumb140.jpg</a> '. This content should also be served over HTTPS. JQMIGRATE: Migrate is installed with logging active, version 3.0.0 v2.js?1537287099:31 JQMIGRATE: jQuery.fn.bind() is deprecated n @ v2.js?1537287099:31 bind @ v2.js?1537287099:31 (anonymous) @ browse.js?1530046280:603 h @ v2.js?1537287099:25 d @ v2.js?1537287099:25 setTimeout (async) (anonymous) @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 fire @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 ready @ v2.js?1537287099:25 d @ v2.js?1537287099:24 v2.js?1537287099:31 console.trace n @ v2.js?1537287099:31 bind @ v2.js?1537287099:31 (anonymous) @ browse.js?1530046280:603 h @ v2.js?1537287099:25 d @ v2.js?1537287099:25 setTimeout (async) (anonymous) @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 fire @ v2.js?1537287099:25 u @ v2.js?1537287099:25 fireWith @ v2.js?1537287099:25 ready @ v2.js?1537287099:25 d @ v2.js?1537287099:24