I create a character sheet, set the class to Wizard, go to the Spells tab, and enter several spells. They are automatically prepared when I enter them (circle to the left of spell is filled in red). I attempt to unprepare some of the spells by left-clicking on the circle (the documentation indicates that this should toggle preparedness). This does not toggle whether the circle is filled in, but instead sends the spell card output to the chat. Tried with Firefox 52 and Chromium 63.0.3239.132 Browser Addons/Extensions: Adblock Plus on both Tried with Redhat Linux and Elementary OS (Linux). Console Log: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> https://*.googlesyndication.com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-cvuDnCVB/djhWYgwjCDTglE9CEVLPJyujnKXYeIdJVU='), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> https://*.googlesyndication.com <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> https://*.googlesyndication.com <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> https://*.googlesyndication.com <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.googlesyndication.com https://*.tokbox.com https://*.googlesyndication.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> https://*.googlesyndication.com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> https://*.googlesyndication.com <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-k8Kx+oSRaLZ+X7/r67j0Mow6bzS2pemyX++9YAOg3BU='), or a nonce ('nonce-...') is required to enable inline execution. app.js:84 70 app.js:85 TOUCH SUPPORTED: false app.js:85 USING WEBGL ACCELERATION... app.js:85 WEBGL STARTUP SUCCESS app.js:86 Custom Sheet Translation app.js:79 select app.js:79 Switch mode to select app.js:96 Initializing new dice engine with randomness... app.js:96 Using random entropy app.js:99 Compiling sheet... app.js:99 Found rolltemplate: simple app.js:99 Found rolltemplate: atk app.js:99 Found rolltemplate: dmg app.js:99 Found rolltemplate: atkdmg app.js:99 Found rolltemplate: desc app.js:99 Found rolltemplate: spell app.js:99 Found rolltemplate: traits app.js:99 Found rolltemplate: npc app.js:99 Found rolltemplate: npcatk app.js:99 Found rolltemplate: npcdmg app.js:99 Found rolltemplate: npcaction app.js:99 Found webworker script app.js:99 Finding sheet rolls... app.js:100 window resize app.js:85 Final set zoom! app.js:85 UPDATE GL SIZE! app.js:85 Final set zoom! tutorial_tips.js:7 tuts loaded app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png</a>'. This content should also be served over HTTPS. app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/weight_lbs.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/weight_lbs.png</a>'. This content should also be served over HTTPS. 3app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png</a>'. This content should also be served over HTTPS. app.js:94 MESSAGE RECEIVED app.js:94 MessageEvent sheetsandboxworker.js?20170926:sourcemap:260 Starting up WEB WORKER /js/d20/sheetsandboxworker.js?20170926:260 Starting up WEB WORKER app.js:91 Final page load. app.js:101 Refresh jukebox List! app.js:91 Auth'ed. app.js:91 Go post auth! app.js:91 initial setup app.js:89 T.s app.js:94 refershing page listings! app.js:91 Scan for new plays! app.js:98 Refresh Journal List! app.roll20.net/:3 Uncaught TypeError: Cannot read property 'id' of undefined at Object.eval (eval at jqotec (base.js:2), <anonymous>:3:82) at HTMLScriptElement.<anonymous> (base.js:1) at Function.each (jquery.1.8.2.min.js:2) at init.each (jquery.1.8.2.min.js:2) at init.jqote (base.js:1) at Object.d20.journal.refreshSpeakingAsOptions (app.js:98) at Object.d20.journal.refreshJournalList (app.js:98) at app.js:98 app.js:91 Got players value... app.js:91 joining game... app.js:89 Player -L0aJWRC6OjpoSdmi_K0 is offline... app.js:89 Global Volume: 100=1 app.js:89 Player -L0aJX4FSmh9wh--IGid is offline... app.js:89 Player -L0aJqxF8SbVLjWs17WD is offline... app.js:89 Player -L0aLhQbElvRU502oSJK is offline... app.js:89 Player -L19oraeTYdebnHQkfDQ is offline... app.js:91 Deferred finish joining... app.js:84 Firebase Online 39app.js:88 Full load page! app.js:91 We have 39 pages app.js:91 Scan for new plays! app.js:91 handle page changes app.js:91 false app.js:87 239 app.js:101 Refresh jukebox List! app.js:91 init active page! app.js:88 activate page! app.js:88 FULLY ACTIVATE VIEWS FOR PAGE. app.js:87 Do refresh link cache! app.js:88 Reorder by ZORDER app.js:98 Refresh Journal List! app.js:98 Search took 209ms app.js:88 Graphics: 3 app.js:88 Paths: 3 jquery.1.8.2.min.js:2 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/spellbg.jpg" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/spellbg.jpg</a>'. This content should also be served over HTTPS. get @ jquery.1.8.2.min.js:2 app.js:94 refershing page listings! 2app.js:88 Reorder by ZORDER app.js:88 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... to <a href="https://s3.amazonaws.com/files.d20.io/marketplace" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace</a>... app.js:88 setting src app.js:83 Cols: 2 Rows: 2 app.js:83 Took 11ms to generate cache. app.js:92 Show Character View Dialog! app.js:92 DELAY RENDER FOR ATTRIBUTES! app.js:87 239 app.js:88 Reorder by ZORDER app.js:92 --- RENDER CHARACTIVE VIEW ---- app.js:92 Redoing charsheet html app.js:92 81ms to end of html app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png</a>'. This content should also be served over HTTPS. app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/weight_lbs.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/weight_lbs.png</a>'. This content should also be served over HTTPS. 3app.roll20.net/:1 Mixed Content: The page at '<a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a>' was loaded over HTTPS, but requested an insecure image '<a href="http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png" rel="nofollow">http://imgsrv.roll20.net/?src=raw.githubusercontent.com/Roll20/roll20-character-sheets/master/5th%2520Edition%2520OGL%2520by%2520Roll20/images/srd5_360.png</a>'. This content should also be served over HTTPS. sheetsandboxworker.js?20170926:sourcemap:67 Triggering for sheet:opened app.js:92 Really updating character sheet values app.js:92 Setting up repeating sections took until 53ms app.js:92 Updating ALL VALUES app.js:92 Finding list of dirty attributes took until 54ms app.js:92 Querytest took until 54ms app.js:92 Attribute cache compliation took until 55ms app.js:92 Set values (including auto-calcuating variables) took until 87ms app.js:92 Appending to screen took until 112ms app.js:92 Took 117ms /js/d20/sheetsandboxworker.js?20170926:67 Triggering for sheet:opened VM21:3550 5th Edition OGL by Roll20 v2.1 (unknown) 5th Edition OGL by Roll20 v2.1 app.js:97 Finished after going 3 levels deep. app.js:97 Begin processing op! app.js:97 Inline rolls complete! app.js:88 activate page! app.js:88 FULLY ACTIVATE VIEWS FOR PAGE. app.js:100 window resize app.js:85 Final set zoom! app.js:85 UPDATE GL SIZE! app.js:85 Final set zoom!