To add onto the bug report above, when i look at the console log I see an error related to the iframe containing the PHB info: Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Rules:Races?sharedCompendium=5301595&charmancer=true#toc_1" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Rules:Races?sharedCompendium=5301595&charmancer=true#toc_1</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored User Info: Browser: Chrome 77.0.3865.90 Operating System: Mac OSX Catalina Addons/extensions: LastPass Javascript enabled = true The following is my full console log: /editor/:12 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-mCi5ZlTte55ZMsfjWYjM0I8avINz5VKdrbZzSsNm0IQ='), or a nonce ('nonce-...') is required to enable inline execution. /editor/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-JeWbh0DatVbnZhQNBSXTdn1mQkTkdb72YVLCn8c2k88='), or a nonce ('nonce-...') is required to enable inline execution. jquery.migrate.js:20 JQMIGRATE: Logging is active app.roll20.net/:5354 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce ('nonce-...') is required to enable inline execution. app.js?1570549581:541 70 app.js?1570549581:543 TOUCH SUPPORTED: false app.js?1570549581:543 USING WEBGL ACCELERATION... app.js?1570549581:543 WEBGL STARTUP SUCCESS app.js?1570549581:545 Custom Sheet Translation app.js?1570549581:536 select app.js?1570549581:536 Switch mode to select app.js?1570549581:557 Initializing new dice engine with randomness... app.js?1570549581:557 Using random entropy app.js?1570549581:560 Compiling sheet... app.js?1570549581:560 Found rolltemplate: simple app.js?1570549581:560 Found rolltemplate: atk app.js?1570549581:560 Found rolltemplate: dmg app.js?1570549581:560 Found rolltemplate: atkdmg app.js?1570549581:560 Found rolltemplate: desc app.js?1570549581:560 Found rolltemplate: spell app.js?1570549581:560 Found rolltemplate: traits app.js?1570549581:560 Found rolltemplate: npc app.js?1570549581:560 Found rolltemplate: npcatk app.js?1570549581:560 Found rolltemplate: npcdmg app.js?1570549581:560 Found rolltemplate: npcaction app.js?1570549581:560 Found rolltemplate: mancerroll app.js?1570549581:560 Found rolltemplate: mancerhproll app.js?1570549581:560 Found Charactermancer Repeating Section: topbar app.js?1570549581:560 Found Charactermancer Repeating Section: leveler-topbar app.js?1570549581:560 Found Charactermancer Repeating Section: row app.js?1570549581:560 Found Charactermancer Repeating Section: utilityrow app.js?1570549581:560 Found Charactermancer Repeating Section: choose app.js?1570549581:560 Found Charactermancer Repeating Section: custom-proficiency app.js?1570549581:560 Found Charactermancer Repeating Section: custom-trait app.js?1570549581:560 Found Charactermancer Repeating Section: spell-holder app.js?1570549581:560 Found Charactermancer Repeating Section: spell-item app.js?1570549581:560 Found Charactermancer Repeating Section: asi-row app.js?1570549581:560 Found Charactermancer Repeating Section: hpbylevel app.js?1570549581:560 Found Charactermancer Template: l1-welcome app.js?1570549581:560 Found Charactermancer Template: l1-race app.js?1570549581:560 Found Charactermancer Template: l1-class app.js?1570549581:560 Found Charactermancer Template: l1-abilities app.js?1570549581:560 Found Charactermancer Template: l1-background app.js?1570549581:560 Found Charactermancer Template: l1-equipment app.js?1570549581:560 Found Charactermancer Template: l1-spells app.js?1570549581:560 Found Charactermancer Template: l1-feat app.js?1570549581:560 Found Charactermancer Template: l1-bio app.js?1570549581:560 Found Charactermancer Template: l1-summary app.js?1570549581:560 Found Charactermancer Template: final app.js?1570549581:560 Found Charactermancer Template: lp-welcome app.js?1570549581:560 Found Charactermancer Template: lp-levels app.js?1570549581:560 Found Charactermancer Template: lp-choices app.js?1570549581:560 Found Charactermancer Template: lp-asi app.js?1570549581:560 Found Charactermancer Template: lp-spells app.js?1570549581:560 Found Charactermancer Template: lp-summary app.js?1570549581:560 Found Charactermancer Template: lp-spellchoice app.js?1570549581:560 Found webworker script app.js?1570549581:560 Finding sheet rolls... app.js?1570549581:561 Including compendium template css. app.js?1570549581:563 window resize app.js?1570549581:543 Final set zoom! app.js?1570549581:542 UPDATE GL SIZE! app.js?1570549581:543 Final set zoom! tutorial_tips.js:7 tuts loaded 18Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure image '<URL>'. This content should also be served over HTTPS. app.js?1570549581:555 MESSAGE RECEIVED app.js?1570549581:555 MessageEvent {isTrusted: true, data: {…}, origin: "<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>", lastEventId: "", source: Window, …} sheetsandboxworker.js?1570901013553:682 Starting up WEB WORKER app.js?1570549581:551 Final page load. app.js?1570549581:563 Refresh jukebox List! app.js?1570549581:551 Scan for new plays! app.js?1570549581:549 Auth'ed. app.js?1570549581:549 Go post auth! app.js?1570549581:549 initial setup app.js?1570549581:547 T.i {attributes: {…}, _escapedAttributes: {…}, cid: "c0", changed: {…}, _silent: {…}, …} app.js?1570549581:549 Got players value... app.js?1570549581:550 joining game... app.js?1570549581:547 Full load page! app.js?1570549581:549 We have 1 pages app.js?1570549581:548 Player -Lr-xTXbIiTZwIRT_CSP is offline... app.js?1570549581:548 Global Volume: 100=1 app.js?1570549581:550 Deferred finish joining... app.js?1570549581:541 Firebase Online app.js?1570549581:555 refershing page listings! app.js?1570549581:549 handle page changes app.js?1570549581:549 false app.js?1570549581:555 refershing page listings! app.js?1570549581:545 Do refresh link cache! app.js?1570549581:551 Scan for new plays! app.js?1570549581:560 Refresh Journal List! app.js?1570549581:560 Search took 8ms app.js?1570549581:550 init active page! app.js?1570549581:547 activate page! app.js?1570549581:547 FULLY ACTIVATE VIEWS FOR PAGE. app.js?1570549581:547 Graphics: 0 app.js?1570549581:547 Paths: 0 app.js?1570549581:547 Reorder by ZORDER app.js?1570549581:555 refershing page listings! app.js?1570549581:570 DOMException t.errorLog @ app.js?1570549581:570 (anonymous) @ app.js?1570549581:571 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:571 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:331 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:338 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 (anonymous) @ app.js?1570549581:339 (anonymous) @ app.js?1570549581:328 o.raiseReject @ app.js?1570549581:328 o.raiseRejects @ app.js?1570549581:328 o.reject @ app.js?1570549581:328 d @ app.js?1570549581:339 Promise.catch (async) __webRtcLocalMediaInitialized.window.navigator.navigator.mediaDevices.navigator.mediaDevices.getUserMedia.navigator.fmGetUserMedia @ app.js?1570549581:339 r.doGetUserMedia @ app.js?1570549581:339 r.doGetUserMedia @ app.js?1570549581:339 r.doStartInternal @ app.js?1570549581:339 (anonymous) @ app.js?1570549581:339 (anonymous) @ app.js?1570549581:328 setTimeout (async) e.dispatch @ app.js?1570549581:328 r.doStart @ app.js?1570549581:339 o.startInternal @ app.js?1570549581:338 o.start @ app.js?1570549581:338 i.start @ app.js?1570549581:331 (anonymous) @ app.js?1570549581:571 Promise.then (async) (anonymous) @ app.js?1570549581:571 (anonymous) @ app.js?1570549581:328 o.raiseResolve @ app.js?1570549581:328 o.process @ app.js?1570549581:328 i.then @ app.js?1570549581:328 t.startLocalMedia @ app.js?1570549581:571 (anonymous) @ app.js?1570549581:571 c @ firebase.2.4.0.js:240 (anonymous) @ firebase.2.4.0.js:201 gc @ firebase.2.4.0.js:52 cc @ firebase.2.4.0.js:30 dc @ firebase.2.4.0.js:29 h.Kb @ firebase.2.4.0.js:220 h.Ld @ firebase.2.4.0.js:188 Eh.Ld @ firebase.2.4.0.js:178 (anonymous) @ firebase.2.4.0.js:176 yh @ firebase.2.4.0.js:170 La.onmessage @ firebase.2.4.0.js:169 Show 5 more frames app.js?1570549581:563 Refresh jukebox List! app.js?1570549581:552 Show Character View Dialog! app.js?1570549581:552 --- RENDER CHARACTIVE VIEW ---- app.js?1570549581:552 Redoing charsheet html app.js?1570549581:552 97ms to end of html app.js?1570549581:545 239 VM12:4683 5th Edition OGL by Roll20 v2.7 app.js?1570549581:552 Really updating character sheet values app.js?1570549581:552 Setting up repeating sections took until 11ms app.js?1570549581:552 Updating ALL VALUES app.js?1570549581:552 Finding list of dirty attributes took until 12ms app.js?1570549581:552 Querytest took until 13ms app.js?1570549581:552 Attribute cache compliation took until 13ms app.js?1570549581:552 Set values (including auto-calcuating variables) took until 65ms app.js?1570549581:552 Appending to screen took until 93ms app.js?1570549581:552 Took 97ms jquery.migrate.js:39 JQMIGRATE: $(html) HTML strings must start with '<' character migrateWarn @ jquery.migrate.js:39 jQuery.fn.init @ jquery.migrate.js:199 jQuery @ jquery-1.9.1.js:62 d20.utils.htmlTranslator @ app.js?1570549581:545 d20.journal.charmancerLoadStep @ app.js?1570549581:561 (anonymous) @ app.js?1570549581:561 fire @ jquery-1.9.1.js:1037 fireWith @ jquery-1.9.1.js:1148 done @ jquery-1.9.1.js:8074 callback @ jquery-1.9.1.js:8598 XMLHttpRequest.send (async) (anonymous) @ VM782:1 send @ jquery-1.9.1.js:8526 ajax @ jquery-1.9.1.js:7978 (anonymous) @ app.js?1570549581:561 jquery.migrate.js:41 console.trace migrateWarn @ jquery.migrate.js:41 jQuery.fn.init @ jquery.migrate.js:199 jQuery @ jquery-1.9.1.js:62 d20.utils.htmlTranslator @ app.js?1570549581:545 d20.journal.charmancerLoadStep @ app.js?1570549581:561 (anonymous) @ app.js?1570549581:561 fire @ jquery-1.9.1.js:1037 fireWith @ jquery-1.9.1.js:1148 done @ jquery-1.9.1.js:8074 callback @ jquery-1.9.1.js:8598 XMLHttpRequest.send (async) (anonymous) @ VM782:1 send @ jquery-1.9.1.js:8526 ajax @ jquery-1.9.1.js:7978 (anonymous) @ app.js?1570549581:561 app.roll20.net/:1 Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Rules:Races?sharedCompendium=5301595&charmancer=true#toc_1" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Rules:Races?sharedCompendium=5301595&charmancer=true#toc_1</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored. v2.js?1569951309:57 JQMIGRATE: Migrate is installed with logging active, version 3.0.0 v2.js?1569951309:57 JQMIGRATE: jQuery.expr[":"] is now jQuery.expr.pseudos i @ v2.js?1569951309:57 get @ v2.js?1569951309:57 (anonymous) @ v2.js?1569951309:178 (anonymous) @ v2.js?1569951309:178 (anonymous) @ v2.js?1569951309:178 v2.js?1569951309:57 console.trace i @ v2.js?1569951309:57 get @ v2.js?1569951309:57 (anonymous) @ v2.js?1569951309:178 (anonymous) @ v2.js?1569951309:178 (anonymous) @ v2.js?1569951309:178 compendium.js?1568130237:650 t.fn.init [div#tableofcontents] v2.js?1569951309:57 JQMIGRATE: jQuery.fn.removeAttr no longer sets boolean properties: required i @ v2.js?1569951309:57 (anonymous) @ v2.js?1569951309:57 each @ v2.js?1569951309:50 t.fn.removeAttr @ v2.js?1569951309:57 buildDom @ typeahead.js?1483835727:1652 Typeahead @ typeahead.js?1483835727:1458 attach @ typeahead.js?1483835727:1708 each @ v2.js?1569951309:50 each @ v2.js?1569951309:50 initialize @ typeahead.js?1483835727:1702 $.fn.typeahead @ typeahead.js?1483835727:1774 (anonymous) @ compendium.js?1568130237:233 h @ v2.js?1569951309:51 d @ v2.js?1569951309:51 setTimeout (async) (anonymous) @ v2.js?1569951309:51 u @ v2.js?1569951309:51 fireWith @ v2.js?1569951309:51 fire @ v2.js?1569951309:51 u @ v2.js?1569951309:51 fireWith @ v2.js?1569951309:51 ready @ v2.js?1569951309:51 d @ v2.js?1569951309:50 v2.js?1569951309:57 console.trace i @ v2.js?1569951309:57 (anonymous) @ v2.js?1569951309:57 each @ v2.js?1569951309:50 t.fn.removeAttr @ v2.js?1569951309:57 buildDom @ typeahead.js?1483835727:1652 Typeahead @ typeahead.js?1483835727:1458 attach @ typeahead.js?1483835727:1708 each @ v2.js?1569951309:50 each @ v2.js?1569951309:50 initialize @ typeahead.js?1483835727:1702 $.fn.typeahead @ typeahead.js?1483835727:1774 (anonymous) @ compendium.js?1568130237:233 h @ v2.js?1569951309:51 d @ v2.js?1569951309:51 setTimeout (async) (anonymous) @ v2.js?1569951309:51 u @ v2.js?1569951309:51 fireWith @ v2.js?1569951309:51 fire @ v2.js?1569951309:51 u @ v2.js?1569951309:51 fireWith @ v2.js?1569951309:51 ready @ v2.js?1569951309:51 d @ v2.js?1569951309:50 app.roll20.net/:1 A cookie associated with a cross-site resource at <a href="https://nr-data.net/" rel="nofollow">https://nr-data.net/</a> was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at <a href="https://www.chromestatus.com/feature/5088147346030592" rel="nofollow">https://www.chromestatus.com/feature/5088147346030592</a> and <a href="https://www.chromestatus.com/feature/5633521622188032" rel="nofollow">https://www.chromestatus.com/feature/5633521622188032</a>.