Here is the call that is failing with a 404 in Chrome (cookie header removed): curl '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638</a>' -H 'authority: app.roll20.net' -H 'upgrade-insecure-requests: 1' -H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36' -H 'sec-fetch-dest: iframe' -H 'accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9' -H 'sec-fetch-site: same-origin' -H 'sec-fetch-mode: navigate' -H 'referer: <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' -H 'accept-language: en-US,en;q=0.9,zh-TW;q=0.8,zh;q=0.7' --compressed The Safari request: :method: GET :scheme: https :authority: app.roll20.net :path: /compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: br, gzip, deflate Host: app.roll20.net User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15 Accept-Language: en-us Referer: <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a> Connection: keep-alive I tried calling the address directly in both Chrome and Safari as well as accessing it through the search tool in the Compendium in my campaign. Chrome Console log: /editor/#:12 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-LEM+5eQ+wmT6HyTgZxxTvpXgE7bmLlocvOVNbiPTtrs='), or a nonce ('nonce-...') is required to enable inline execution.
/editor/#:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-/XHNKTzdVLpPBcMgsOl9LN6PEC5ufZbaLdoU14BWKr0='), or a nonce ('nonce-...') is required to enable inline execution.
jquery.migrate.js:20 JQMIGRATE: Logging is active
?timestamp=1582433501&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:15 CAMPAIGN ID: 3745638
/editor/#:5516 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-K9JqlX0nzFFCtmR1' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce ('nonce-...') is required to enable inline execution.
app.js?1582045580:541 70
app.js?1582045580:543 TOUCH SUPPORTED: false
app.js?1582045580:543 USING WEBGL ACCELERATION...
app.js?1582045580:543 WEBGL STARTUP SUCCESS
app.js?1582045580:545 Custom Sheet Translation
app.js?1582045580:560 Loading Custom character sheet.
app.js?1582045580:560 Including compendium template css.
tutorial_tips.js:7 tuts loaded
/editor/#:1 [DOM] Found 3 elements with non-unique id #0: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name=β"Item Type[]β" id=β"0" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"0" data-match-type=β"Exact" placeholder=β"Select Some Options">ββ¦β</select>β <input class=β"filter-search_filter-value filtername" data-filter-num=β"name" data-match-type=β"Any" id=β"0" name=β"Name" type=β"text" value>β <input class=β"filter-search_filter-value filtername" data-filter-num=β"name" data-match-type=β"Any" id=β"0" name=β"Name" type=β"text" value>β
/editor/#:1 [DOM] Found 3 elements with non-unique id #1: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select aria-selected=β"true" class=β"chosen filter-search_filter-value" data-filter-num=β"1" data-match-type=β"Exact" id=β"1" multiple name=β"expansion">ββ¦β</select>β <select name=β"Level[]β" id=β"1" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"1" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β <select name=β"Alignment[]β" id=β"1" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"1" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β
/editor/#:1 [DOM] Found 2 elements with non-unique id #2: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name=β"Classes[]β" id=β"2" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"2" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β <input class=β"filter-search_filter-value" data-filter-num=β"2" data-match-type=β"Any" id=β"2" name=β"Speed" type=β"text" value>β
/editor/#:1 [DOM] Found 2 elements with non-unique id #3: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name=β"School[]β" id=β"3" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"3" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β <select name=β"Type[]β" id=β"3" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"3" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β
/editor/#:1 [DOM] Found 2 elements with non-unique id #6: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name=β"Casting Time[]β" id=β"6" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"6" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β <select name=β"Languages[]β" id=β"6" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"6" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β
/editor/#:1 [DOM] Found 2 elements with non-unique id #7: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name=β"Range[]β" id=β"7" class=β"chosen filter-search_filter-value multiselect" multiple=β"multiple" aria-selected=β"true" data-filter-num=β"7" data-match-type=β"Any" placeholder=β"Select Some Options">ββ¦β</select>β <select aria-selected=β"true" class=β"chosen filter-search_filter-value" data-filter-num=β"7" data-match-type=β"Any" id=β"7" multiple name=β"expansion">ββ¦β</select>β
/editor/#:1 [DOM] Found 2 elements with non-unique id #color_value: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β
sheetsandboxworker.js?1582433503860:682 Starting up WEB WORKER
DevTools failed to parse SourceMap: <a href="https://app.roll20.net/js/d20/underscore-min.map" rel="nofollow">https://app.roll20.net/js/d20/underscore-min.map</a>
app.js?1582045580:551 Final page load.
app.js?1582045580:549 Auth'ed.
app.js?1582045580:549 Go post auth!
app.js?1582045580:549 initial setup
app.js?1582045580:550 joining game...
app.js?1582045580:548 Player -LMh28ETqVQ1RTXicrYb is offline...
app.js?1582045580:548 Player -LNQ5zp5QenKOmjeMciB is offline...
app.js?1582045580:548 Player -LNQwrrtK0PfAhF1peUn is offline...
app.js?1582045580:548 Player -LNRx0npOI5-YIm4jr6C is offline...
app.js?1582045580:548 Player -LNSkaGW_bhFiu6wfA9o is offline...
app.js?1582045580:548 Player -LRo5tLymSaWcbqg5A94 is offline...
app.js?1582045580:548 Player -Ley88_MkDdXLspQ0hVJ is offline...
app.js?1582045580:550 Deferred finish joining...
app.js?1582045580:541 Firebase Online
18app.js?1582045580:547 Full load page!
app.js?1582045580:549 We have 60 pages
/editor/#:1 [DOM] Found 61 elements with non-unique id #color_value: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β <input type=β"text" size=β"8" id=β"color_value">β
21[.WebGL-0x7f92e743d400]RENDER WARNING: Render count or primcount is 0.
/editor/#:1 Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored.
jquery-1.9.1.js:5951 GET <a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638</a> 404
(anonymous) @ jquery-1.9.1.js:5951
domManip @ jquery-1.9.1.js:6155
append @ jquery-1.9.1.js:5949
jQuery.fn.<computed> @ jquery-1.9.1.js:6342
_create @ jquery-ui.1.9.0.custom.min.js?1530038378:8387
(anonymous) @ jquery-ui.1.9.0.custom.min.js?1530038378:431
_createWidget @ jquery-ui.1.9.0.custom.min.js?1530038378:596
$.<computed>.<computed> @ jquery-ui.1.9.0.custom.min.js?1530038378:395
(anonymous) @ jquery-ui.1.9.0.custom.min.js?1530038378:540
each @ jquery-1.9.1.js:648
each @ jquery-1.9.1.js:270
$.fn.<computed> @ jquery-ui.1.9.0.custom.min.js?1530038378:535
d20.utils.openCompendiumPage @ app.js?1582045580:545
(anonymous) @ app.js?1582045580:568
dispatch @ jquery-1.9.1.js:3074
elemData.handle @ jquery-1.9.1.js:2750
VM18911 v2.js:57 JQMIGRATE: Migrate is installed with logging active, version 3.0.0
VM18911 v2.js:57 JQMIGRATE: jQuery.expr[":"] is now jQuery.expr.pseudos
i @ VM18911 v2.js:57
get @ VM18911 v2.js:57
(anonymous) @ VM18911 v2.js:178
Sweetalert2.swal.sweetAlert.Swal.SweetAlert @ VM18911 v2.js:178
(anonymous) @ VM18911 v2.js:178
VM18911 v2.js:57 console.trace
i @ VM18911 v2.js:57
get @ VM18911 v2.js:57
(anonymous) @ VM18911 v2.js:178
Sweetalert2.swal.sweetAlert.Swal.SweetAlert @ VM18911 v2.js:178
(anonymous) @ VM18911 v2.js:178 Safari Console Log: [Log] Starting up WEB WORKER (sheetsandboxworker.js, line 682)
[Error] Failed to load resource: the server responded with a status of 404 () (underscore-min.map, line 0)
[Error] Invalid 'X-Frame-Options' header encountered when loading '<a href="https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce" rel="nofollow">https://app.roll20.net/compendium/dnd5e/Spells%3AEnlarge%20Reduce?sharedCompendium=3745638#h-Enlarge%20Reduce</a>': '<a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a>' is not a recognized directive. The header will be ignored.
[Error] Failed to load resource: the server responded with a status of 404 () (Spells:Enlarge Reduce, line 0)
[Log] JQMIGRATE: Migrate is installed with logging active, version 3.0.0 (v2.js, line 57)
[Warning] JQMIGRATE: jQuery.expr[":"] is now jQuery.expr.pseudos (v2.js, line 57)
[Log] Trace
i (v2.js:57:184)
get (v2.js:57:289)
(anonymous function) (v2.js:178:1315)
(anonymous function) (v2.js:178)
Global Code (v2.js:178:83)