it just stays at the loading screen Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:8 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:9 Refused to load the script '<a href="https://majuwe.com/ad.php?u=cd6d0eaf50f19287f462dbe184fe2c9b" rel="nofollow">https://majuwe.com/ad.php?u=cd6d0eaf50f19287f462dbe184fe2c9b</a>' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>". app.roll20.net/:1 Uncaught SyntaxError: Unexpected identifier app.js:18 Uncaught ReferenceError: soundManager is not defined app.roll20.net/:28 [blocked] The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but ran insecure content from '<a href="http://istatic.datafastguru.info/fo/min/wpgb.js?bname=TinyWallet&subid=1089_11200" rel="nofollow">http://istatic.datafastguru.info/fo/min/wpgb.js?bname=TinyWallet&subid=1089_11200</a>': this content should also be loaded over HTTPS. app.roll20.net/:1 Refused to load the script '<a href="https://d2cnb4m0nke2lh.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js" rel="nofollow">https://d2cnb4m0nke2lh.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js</a>' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>". app.roll20.net/:1 Refused to load the script '<a href="https://cdncache-a.akamaihd.net/loaders/icp" rel="nofollow">https://cdncache-a.akamaihd.net/loaders/icp</a>' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>". app.roll20.net/:1 Refused to load the script '<a href="https://cdncache-a.akamaihd.net/js/4756e6e20323c6c6f627e2070716/r.js" rel="nofollow">https://cdncache-a.akamaihd.net/js/4756e6e20323c6c6f627e2070716/r.js</a>' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a>".