Here is the call that is failing with a 404 in Chrome (cookie header removed): curl '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638</a>' -H 'authority: app.roll20.net' -H 'upgrade-insecure-requests: 1' -H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36' -H 'sec-fetch-dest: iframe' -H 'accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9' -H 'sec-fetch-site: same-origin' -H 'sec-fetch-mode: navigate' -H 'referer: <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' -H 'accept-language: en-US,en;q=0.9,zh-TW;q=0.8,zh;q=0.7' --compressed The Safari request: :method: GET :scheme: https :authority: app.roll20.net :path: /compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: br, gzip, deflate Host: app.roll20.net User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15 Accept-Language: en-us Referer: <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a> Connection: keep-alive I tried calling the address directly in both Chrome and Safari as well as accessing it through the search tool in the Compendium in my campaign. Chrome Console log: /editor/#:12 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-LEM+5eQ+wmT6HyTgZxxTvpXgE7bmLlocvOVNbiPTtrs='), or a nonce ('nonce-...') is required to enable inline execution.
/editor/#:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-/XHNKTzdVLpPBcMgsOl9LN6PEC5ufZbaLdoU14BWKr0='), or a nonce ('nonce-...') is required to enable inline execution.
jquery.migrate.js:20 JQMIGRATE: Logging is active
?timestamp=1582433501&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:15 CAMPAIGN ID: 3745638
/editor/#:5516 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce ('nonce-...') is required to enable inline execution.
app.js?1582045580:541 70
app.js?1582045580:543 TOUCH SUPPORTED: false
app.js?1582045580:543 USING WEBGL ACCELERATION...
app.js?1582045580:543 WEBGL STARTUP SUCCESS
app.js?1582045580:545 Custom Sheet Translation
app.js?1582045580:560 Loading Custom character sheet.
app.js?1582045580:560 Including compendium template css.
tutorial_tips.js:7 tuts loaded
/editor/#:1 [DOM] Found 3 elements with non-unique id #0: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Item Type[]" id="0" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="0" data-match-type="Exact" placeholder="Select Some Options">…</select> <input class="filter-search_filter-value filtername" data-filter-num="name" data-match-type="Any" id="0" name="Name" type="text" value> <input class="filter-search_filter-value filtername" data-filter-num="name" data-match-type="Any" id="0" name="Name" type="text" value>
/editor/#:1 [DOM] Found 3 elements with non-unique id #1: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select aria-selected="true" class="chosen filter-search_filter-value" data-filter-num="1" data-match-type="Exact" id="1" multiple name="expansion">…</select> <select name="Level[]" id="1" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="1" data-match-type="Any" placeholder="Select Some Options">…</select> <select name="Alignment[]" id="1" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="1" data-match-type="Any" placeholder="Select Some Options">…</select>
/editor/#:1 [DOM] Found 2 elements with non-unique id #2: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Classes[]" id="2" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="2" data-match-type="Any" placeholder="Select Some Options">…</select> <input class="filter-search_filter-value" data-filter-num="2" data-match-type="Any" id="2" name="Speed" type="text" value>
/editor/#:1 [DOM] Found 2 elements with non-unique id #3: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="School[]" id="3" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="3" data-match-type="Any" placeholder="Select Some Options">…</select> <select name="Type[]" id="3" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="3" data-match-type="Any" placeholder="Select Some Options">…</select>
/editor/#:1 [DOM] Found 2 elements with non-unique id #6: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Casting Time[]" id="6" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="6" data-match-type="Any" placeholder="Select Some Options">…</select> <select name="Languages[]" id="6" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="6" data-match-type="Any" placeholder="Select Some Options">…</select>
/editor/#:1 [DOM] Found 2 elements with non-unique id #7: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Range[]" id="7" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="7" data-match-type="Any" placeholder="Select Some Options">…</select> <select aria-selected="true" class="chosen filter-search_filter-value" data-filter-num="7" data-match-type="Any" id="7" multiple name="expansion">…</select>
/editor/#:1 [DOM] Found 2 elements with non-unique id #color_value: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value">
sheetsandboxworker.js?1582433503860:682 Starting up WEB WORKER
DevTools failed to parse SourceMap: <a href="https://app.roll20.net/js/d20/underscore-min.map" rel="nofollow">https://app.roll20.net/js/d20/underscore-min.map</a>
app.js?1582045580:551 Final page load.
app.js?1582045580:549 Auth'ed.
app.js?1582045580:549 Go post auth!
app.js?1582045580:549 initial setup
app.js?1582045580:550 joining game...
app.js?1582045580:548 Player -LMh28ETqVQ1RTXicrYb is offline...
app.js?1582045580:548 Player -LNQ5zp5QenKOmjeMciB is offline...
app.js?1582045580:548 Player -LNQwrrtK0PfAhF1peUn is offline...
app.js?1582045580:548 Player -LNRx0npOI5-YIm4jr6C is offline...
app.js?1582045580:548 Player -LNSkaGW_bhFiu6wfA9o is offline...
app.js?1582045580:548 Player -LRo5tLymSaWcbqg5A94 is offline...
app.js?1582045580:548 Player -Ley88_MkDdXLspQ0hVJ is offline...
app.js?1582045580:550 Deferred finish joining...
app.js?1582045580:541 Firebase Online
18app.js?1582045580:547 Full load page!
app.js?1582045580:549 We have 60 pages
/editor/#:1 [DOM] Found 61 elements with non-unique id #color_value: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value"> <input type="text" size="8" id="color_value">
21[.WebGL-0x7f92e743d400]RENDER WARNING: Render count or primcount is 0.
/editor/#:1 Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored.
jquery-1.9.1.js:5951 GET <a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638</a> 404
(anonymous) @ jquery-1.9.1.js:5951
domManip @ jquery-1.9.1.js:6155
append @ jquery-1.9.1.js:5949
jQuery.fn.<computed> @ jquery-1.9.1.js:6342
_create @ jquery-ui.1.9.0.custom.min.js?1530038378:8387
(anonymous) @ jquery-ui.1.9.0.custom.min.js?1530038378:431
_createWidget @ jquery-ui.1.9.0.custom.min.js?1530038378:596
$.<computed>.<computed> @ jquery-ui.1.9.0.custom.min.js?1530038378:395
(anonymous) @ jquery-ui.1.9.0.custom.min.js?1530038378:540
each @ jquery-1.9.1.js:648
each @ jquery-1.9.1.js:270
$.fn.<computed> @ jquery-ui.1.9.0.custom.min.js?1530038378:535
d20.utils.openCompendiumPage @ app.js?1582045580:545
(anonymous) @ app.js?1582045580:568
dispatch @ jquery-1.9.1.js:3074
elemData.handle @ jquery-1.9.1.js:2750
VM18911 v2.js:57 JQMIGRATE: Migrate is installed with logging active, version 3.0.0
VM18911 v2.js:57 JQMIGRATE: jQuery.expr[":"] is now jQuery.expr.pseudos
i @ VM18911 v2.js:57
get @ VM18911 v2.js:57
(anonymous) @ VM18911 v2.js:178
Sweetalert2.swal.sweetAlert.Swal.SweetAlert @ VM18911 v2.js:178
(anonymous) @ VM18911 v2.js:178
VM18911 v2.js:57 console.trace
i @ VM18911 v2.js:57
get @ VM18911 v2.js:57
(anonymous) @ VM18911 v2.js:178
Sweetalert2.swal.sweetAlert.Swal.SweetAlert @ VM18911 v2.js:178
(anonymous) @ VM18911 v2.js:178 Safari Console Log: [Log] Starting up WEB WORKER (sheetsandboxworker.js, line 682)
[Error] Failed to load resource: the server responded with a status of 404 () (underscore-min.map, line 0)
[Error] Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored.
[Error] Failed to load resource: the server responded with a status of 404 () (Spells:Enlarge Reduce, line 0)
[Log] JQMIGRATE: Migrate is installed with logging active, version 3.0.0 (v2.js, line 57)
[Warning] JQMIGRATE: jQuery.expr[":"] is now jQuery.expr.pseudos (v2.js, line 57)
[Log] Trace
i (v2.js:57:184)
get (v2.js:57:289)
(anonymous function) (v2.js:178:1315)
(anonymous function) (v2.js:178)
Global Code (v2.js:178:83)