Thanks again all for your help so far! I hope this thread serves as a fairly detailed description of the issue... Regardless, to put it all in one place : Some tokens can not be dragged from Library into my game map As the summary suggests, a large number of the tokens in my Curse of Strahd 5e game cannot be dragged to the game map on any layer. By example, I can successfully drag the " Living Fire " token to the map's token layer, but not the Lich , the Night Hag , the Mastiff , or the Knight . These are just examples -- I have not attempted to drag each token. Steps to Repro (100%, 10/10 attempts) - Launch the Curse of Strahd 5e game I am the host of - Select the Library tab - Find any Monster token entry on the library, and drag it by its' nameplate to the active map Expected Result: A token appears on the map's currently selected layer, associated with that Monster from the library tab Actual Result: Nothing happens. Tested on Chrome Version 71.0.3578.98 (Official Build) (64-bit) as well as Firefox 46.0.1 On Windows 10 version 1803 Javascript enabled No anti-virus software No browser extensions or add-ons Console log below : Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-9oAHhBUuucaRJxS9igyVxrc1rkX90RNbATK+BHYjues='), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-W4z4mOiwkRlHZN9ZhB3StyLZj6HgkMDMbkFJOavx/+M='), or a nonce ('nonce-...') is required to enable inline execution. jquery.migrate.js:20 JQMIGRATE: Logging is active app.js?1548958646:533 70 app.js?1548958646:535 TOUCH SUPPORTED: false app.js?1548958646:535 USING WEBGL ACCELERATION... app.js?1548958646:535 WEBGL STARTUP SUCCESS app.js?1548958646:537 Custom Sheet Translation app.js?1548958646:528 select app.js?1548958646:528 Switch mode to select app.js?1548958646:548 Initializing new dice engine with randomness... app.js?1548958646:548 Using random entropy app.js?1548958646:551 Compiling sheet... app.js?1548958646:551 Found rolltemplate: simple app.js?1548958646:551 Found rolltemplate: atk app.js?1548958646:551 Found rolltemplate: dmg app.js?1548958646:551 Found rolltemplate: atkdmg app.js?1548958646:551 Found rolltemplate: desc app.js?1548958646:551 Found rolltemplate: spell app.js?1548958646:551 Found rolltemplate: traits app.js?1548958646:551 Found rolltemplate: npc app.js?1548958646:551 Found rolltemplate: npcatk app.js?1548958646:551 Found rolltemplate: npcdmg app.js?1548958646:551 Found rolltemplate: npcaction app.js?1548958646:551 Found rolltemplate: mancerroll app.js?1548958646:551 Found rolltemplate: mancerhproll app.js?1548958646:551 Found Charactermancer Repeating Section: topbar app.js?1548958646:551 Found Charactermancer Repeating Section: leveler-topbar app.js?1548958646:551 Found Charactermancer Repeating Section: row app.js?1548958646:551 Found Charactermancer Repeating Section: utilityrow app.js?1548958646:551 Found Charactermancer Repeating Section: choose app.js?1548958646:551 Found Charactermancer Repeating Section: custom-proficiency app.js?1548958646:551 Found Charactermancer Repeating Section: custom-trait app.js?1548958646:551 Found Charactermancer Repeating Section: spell-holder app.js?1548958646:551 Found Charactermancer Repeating Section: spell-item app.js?1548958646:551 Found Charactermancer Repeating Section: asi-row app.js?1548958646:551 Found Charactermancer Repeating Section: hpbylevel app.js?1548958646:551 Found Charactermancer Template: l1-welcome app.js?1548958646:551 Found Charactermancer Template: l1-race app.js?1548958646:551 Found Charactermancer Template: l1-class app.js?1548958646:551 Found Charactermancer Template: l1-abilities app.js?1548958646:551 Found Charactermancer Template: l1-background app.js?1548958646:551 Found Charactermancer Template: l1-equipment app.js?1548958646:551 Found Charactermancer Template: l1-spells app.js?1548958646:551 Found Charactermancer Template: l1-feat app.js?1548958646:551 Found Charactermancer Template: l1-bio app.js?1548958646:551 Found Charactermancer Template: l1-summary app.js?1548958646:551 Found Charactermancer Template: final app.js?1548958646:551 Found Charactermancer Template: lp-welcome app.js?1548958646:551 Found Charactermancer Template: lp-levels app.js?1548958646:551 Found Charactermancer Template: lp-choices app.js?1548958646:551 Found Charactermancer Template: lp-asi app.js?1548958646:551 Found Charactermancer Template: lp-spells app.js?1548958646:551 Found Charactermancer Template: lp-summary app.js?1548958646:551 Found Charactermancer Template: lp-spellchoice app.js?1548958646:551 Found webworker script app.js?1548958646:551 Finding sheet rolls... app.js?1548958646:551 Including compendium template css. app.js?1548958646:554 window resize app.js?1548958646:535 Final set zoom! app.js?1548958646:534 UPDATE GL SIZE! app.js?1548958646:535 Final set zoom! tutorial_tips.js:7 tuts loaded 19Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure image '<URL>'. This content should also be served over HTTPS. app.js?1548958646:546 MESSAGE RECEIVED app.js?1548958646:546 MessageEvent sheetsandboxworker.js?1548962105936:682 Starting up WEB WORKER sheetsandboxworker.js?1548962105936:682 Starting up WEB WORKER app.js?1548958646:542 Final page load. app.js?1548958646:554 Refresh jukebox List! app.js?1548958646:541 Auth'ed. app.js?1548958646:541 Go post auth! app.js?1548958646:541 initial setup app.js?1548958646:539 T.i app.js?1548958646:541 Got players value... app.js?1548958646:541 joining game... app.js?1548958646:539 Player -LNM5P27OGHc9nXxBvW0 is offline... app.js?1548958646:539 Player -LNNSsLmUARZms82A4bB is offline... app.js?1548958646:539 Global Volume: 100=1 app.js?1548958646:539 Player -LNOowbKC-PbHb1TINRm is offline... app.js?1548958646:539 Player -LNhJ879yl7nyuMmE_T9 is offline... app.js?1548958646:539 Player -LNhNY7Sj1tOL0EiuBPX is offline... app.js?1548958646:541 Deferred finish joining... app.js?1548958646:533 Firebase Online app.js?1548958646:546 refershing page listings! 55app.js?1548958646:538 Full load page! app.js?1548958646:541 We have 55 pages app.js?1548958646:542 Scan for new plays! app.js?1548958646:554 Refresh jukebox List! app.js?1548958646:562 Video Quality medium app.js?1548958646:541 handle page changes app.js?1548958646:541 false app.js?1548958646:537 Do refresh link cache! app.js?1548958646:538 Reorder by ZORDER app.js?1548958646:551 Refresh Journal List! app.js?1548958646:551 Search took 167ms app.js?1548958646:541 init active page! app.js?1548958646:538 activate page! app.js?1548958646:538 FULLY ACTIVATE VIEWS FOR PAGE. app.js?1548958646:538 Graphics: 55 app.js?1548958646:538 Paths: 166 app.js?1548958646:546 refershing page listings! app.js?1548958646:538 Reorder by ZORDER app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321819/TknHKB2WFDQOtMv0ZHHc0Q/thumb.jpg?1493768747&14979036125" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321819/TknHKB2WFDQOtMv0ZHHc0Q/thumb.jpg?1493768747&14979036125</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321819/TknHKB2WFDQOtMv0ZHHc0Q/original.jpg?1493768747&14979036125" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321819/TknHKB2WFDQOtMv0ZHHc0Q/original.jpg?1493768747&14979036125</a> app.js?1548958646:538 Reorder by ZORDER app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321860/XGTVhsv6f8rkiEOtB87mNA/thumb.png?1495489342&14979037185" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321860/XGTVhsv6f8rkiEOtB87mNA/thumb.png?1495489342&14979037185</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321860/XGTVhsv6f8rkiEOtB87mNA/med.png?1495489342&14979037185" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321860/XGTVhsv6f8rkiEOtB87mNA/med.png?1495489342&14979037185</a> app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321863/GIKlvSZpYZdV-ykXPtZ8tw/thumb.png?1495489388&14979037245" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321863/GIKlvSZpYZdV-ykXPtZ8tw/thumb.png?1495489388&14979037245</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321863/GIKlvSZpYZdV-ykXPtZ8tw/med.png?1495489388&14979037245" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321863/GIKlvSZpYZdV-ykXPtZ8tw/med.png?1495489388&14979037245</a> app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321862/KTJQ5x8zUc5H2gM6HpKOsQ/thumb.png?1495489378&14979037225" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321862/KTJQ5x8zUc5H2gM6HpKOsQ/thumb.png?1495489378&14979037225</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321862/KTJQ5x8zUc5H2gM6HpKOsQ/max.png?1495489378&14979037225" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321862/KTJQ5x8zUc5H2gM6HpKOsQ/max.png?1495489378&14979037225</a> app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321864/2aZ9xKsHJiQEcqc02IbvaA/thumb.png?1495489414&14979037265" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321864/2aZ9xKsHJiQEcqc02IbvaA/thumb.png?1495489414&14979037265</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321864/2aZ9xKsHJiQEcqc02IbvaA/med.png?1495489414&14979037265" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321864/2aZ9xKsHJiQEcqc02IbvaA/med.png?1495489414&14979037265</a> app.js?1548958646:538 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321865/fc1m4EUOgCPQ3mZ7v9PHKQ/thumb.png?1495489430&14979037285" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321865/fc1m4EUOgCPQ3mZ7v9PHKQ/thumb.png?1495489430&14979037285</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321865/fc1m4EUOgCPQ3mZ7v9PHKQ/med.png?1495489430&14979037285" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321865/fc1m4EUOgCPQ3mZ7v9PHKQ/med.png?1495489430&14979037285</a> app.js?1548958646:538 Reorder by ZORDER 5app.js?1548958646:538 setting src app.js?1548958646:538 Reorder by ZORDER app.js?1548958646:538 setting src app.js?1548958646:538 Reorder by ZORDER 165app.js?1548958646:534 new caster! app.js?1548958646:554 window resize app.js?1548958646:535 Final set zoom! app.js?1548958646:534 UPDATE GL SIZE! app.js?1548958646:535 Final set zoom! app.js?1548958646:554 Body drop! app.js?1548958646:553 drop on upper canvas firebase.2.4.0.js:45 FIREBASE WARNING: Exception was thrown by user callback. SyntaxError: Unexpected end of JSON input at JSON.parse (<anonymous>) at <a href="https://app.roll20.net/assets/app.js?1548958646:553:30259" rel="nofollow">https://app.roll20.net/assets/app.js?1548958646:553:30259</a> at <a href="https://app.roll20.net/assets/app.js?1548958646:543:16614" rel="nofollow">https://app.roll20.net/assets/app.js?1548958646:543:16614</a> at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:710" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:710</a> at gc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a>) at cc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a>) at dc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a>) at Object.I (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a>) at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:3" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:3</a> at Qh.h.Ld (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a>) S @ firebase.2.4.0.js:45 (anonymous) @ firebase.2.4.0.js:52 setTimeout (async) gc @ firebase.2.4.0.js:52 cc @ firebase.2.4.0.js:30 dc @ firebase.2.4.0.js:29 (anonymous) @ firebase.2.4.0.js:218 (anonymous) @ firebase.2.4.0.js:183 h.Ld @ firebase.2.4.0.js:188 Eh.Ld @ firebase.2.4.0.js:178 (anonymous) @ firebase.2.4.0.js:176 yh @ firebase.2.4.0.js:170 La.onmessage @ firebase.2.4.0.js:169 firebase.2.4.0.js:52 Uncaught SyntaxError: Unexpected end of JSON input at JSON.parse (<anonymous>) at app.js?1548958646:553 at app.js?1548958646:543 at firebase.2.4.0.js:201 at gc (firebase.2.4.0.js:52) at cc (firebase.2.4.0.js:30) at dc (firebase.2.4.0.js:29) at Object.I (firebase.2.4.0.js:218) at firebase.2.4.0.js:183 at Qh.h.Ld (firebase.2.4.0.js:188)