A few minutes ago, I noticed that some of the images associated both with existing tokens and tokens being created via the API were being blocked by aws. I can still view the base images in my library, and visit the URLs from the library page, but the URLs in the tabletop app are being blocked with a 403 - access denied. I tried re-creating the tokens from my image library, and they are visible again (for now), however, I now have dead tokens on the map that I can find using the API but cannot select using the tabletop GUI. Response from AWS image request: <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>E92EE4AB8A7BD055</RequestId><HostId>DpO3rrLV9j4Myxc3CGU6Y4dzSa3wsPoTPfWBzz7N5Ww3l3sOWZnHkivkn47+H54xmqfKzZrGUFM=</HostId></Error> Console log: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> https://*.googlesyndication.com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> https://*.googlesyndication.com Either the 'unsafe-inline' keyword, a hash ('sha256-Wv/LzAMHwT/xCFqWPIt1vOpX1mwbFpw6V8U5P9EmEVk='), or a nonce ('nonce-...') is required to enable inline execution. Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> https://*.googlesyndication.com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> https://*.googlesyndication.com Either the 'unsafe-inline' keyword, a hash ('sha256-WgwhnV+Gut6pToxpAeIKBJXM+334HSG+34w//BunHVQ='), or a nonce ('nonce-...') is required to enable inline execution. 70 TOUCH SUPPORTED: false USING WEBGL ACCELERATION... WEBGL STARTUP SUCCESS select Switch mode to select Initializing new dice engine with randomness... Using random entropy Unable to start up OpenTok! Compiling sheet... Found rolltemplate: simple Found rolltemplate: atk Found rolltemplate: dmg Found rolltemplate: atkdmg Found rolltemplate: spell Found rolltemplate: npc Found rolltemplate: npcatk Found rolltemplate: npcdmg Found rolltemplate: npcaction Found webworker script Custom Sheet Translation Finding sheet rolls... window resize Final set zoom! UPDATE GL SIZE! Final set zoom! tuts loaded Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/3OxOqmb.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/3OxOqmb.png</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/py5B0cm.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/py5B0cm.png</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=i.imgur.com/LoT21n1.png" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/LoT21n1.png</a>'. This content should also be served over HTTPS. Starting up WEB WORKER Final page load. Refresh jukebox List! Auth'ed. Go post auth! initial setup Refresh jukebox List! T.r Got players value... joining game... Full load page! We have 3 pages Player -KKejqfi1H2ncGd-Snyu is offline... THREE.WebGLRenderer 69 Global Volume: 87=0.7569 Player -KKfabUKL3O0K7g7V6Lj is offline... Player -KKj3t5jnEGuwlu-z_C5 is offline... Player -KKpGdBEflXgGMIaYZTA is offline... Deferred finish joining... Firebase Online refershing page listings! handle page changes false Refresh jukebox List! refershing page listings! Do refresh link cache! Failed to load resource: the server responded with a status of 403 (Forbidden) init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/3483" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3483</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/3483" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3483</a>... Refresh Journal List! Search took 6ms Graphics: 39 Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/3483" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3483</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/3483" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3483</a>... Paths: 1 Scan for new plays! Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... Failed to load resource: the server responded with a status of 403 (Forbidden) refershing page listings! Failed to load resource: the server responded with a status of 403 (Forbidden) Reorder by ZORDER Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2770" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2770</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2770" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2770</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2847" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2847</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/4646" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4646</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/4646" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4646</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/4708" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4708</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/4708" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4708</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/4072" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4072</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/4072" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/4072</a>... Applying filter t Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/9647" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/9647</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/9647" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/9647</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1985" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1985</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1985" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1985</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/1779" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1779</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/1779" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/1779</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/5154" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/5154</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/5154" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/5154</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Failed to load resource: the server responded with a status of 403 (Forbidden) Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/2024" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2024</a>... Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... setting src Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... setting src Refresh jukebox List! Reorder by ZORDER setting src Failed to load resource: the server responded with a status of 403 (Forbidden) setting src Failed to load resource: the server responded with a status of 403 (Forbidden) setting src t Cols: 1 Rows: 2 Took 0ms to generate cache. setting src init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Graphics: 4 Paths: 0 Reorder by ZORDER Failed to load resource: the server responded with a status of 403 (Forbidden) Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... Failed to load resource: the server responded with a status of 403 (Forbidden) Failed to load resource: the server responded with a status of 403 (Forbidden) Failed to load resource: the server responded with a status of 403 (Forbidden) Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... refershing page listings! Failed to load resource: the server responded with a status of 403 (Forbidden) Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/2030" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/2030</a>... Reorder by ZORDER setting src init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net:5100/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net:5100/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=555" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=555</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55</a>'. This content should also be served over HTTPS. Graphics: 9 Paths: 11 new caster! Reorder by ZORDER Failed to load resource: the server responded with a status of 403 (Forbidden) Applying filter t Swapping <a href="https://s3.amazonaws.com/files.d20.io/images/3214" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3214</a>... to <a href="https://s3.amazonaws.com/files.d20.io/images/3214" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/3214</a>... refershing page listings! Reorder by ZORDER Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=55</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=555" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=555</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net:5100/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net:5100/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. setting src t new lamp Swapping <a href="http://imgsrv.roll20.net:5100/?src=www.dunjinni.c" rel="nofollow">http://imgsrv.roll20.net:5100/?src=www.dunjinni.c</a>... to <a href="http://imgsrv.roll20.net:5100/?src=www.dunjinni.c" rel="nofollow">http://imgsrv.roll20.net:5100/?src=www.dunjinni.c</a>... Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. new lamp Reorder by ZORDER Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. setting src Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5" rel="nofollow">http://imgsrv.roll20.net/?src=www.dunjinni.com/forums/uploads/Bogie/Z82_Torch_fire5a_sc_bg.png&cb=5</a>'. This content should also be served over HTTPS. init active page! activate page! FULLY ACTIVATE VIEWS FOR PAGE. Graphics: 39 Paths: 1 Reorder by ZORDER Failed to load resource: the server responded with a status of 403 (Forbidden) refershing page listings! window resize Final set zoom! UPDATE GL SIZE! Final set zoom!