Players Can't See Map

Hoping for some help.&nbsp; Purchased an adventure from the Marketplace. When players load in they can only see a black box. Followed the trouble shooting steps. Player flag is on correct map: Fog of war is enabled, however I used the eye icon to uncover a part of the map, as well as disabled and the players load, with still no results. Getting the following from Chrome dev console: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*. googlesyndication. com https://*. doubleclick.net <a href="https://partner" rel="nofollow">https://partner</a>. googleadservices.com <a href="https://www.googletagservices" rel="nofollow">https://www.googletagservices</a>. com <a href="https://ssl.google-analytics" rel="nofollow">https://ssl.google-analytics</a>. com <a href="https://www.google-analytics" rel="nofollow">https://www.google-analytics</a>. com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg" rel="nofollow">https://d3clqjduf2gvxg</a>. cloudfront.net <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*. firebaseio.com https://*. tokbox.com https://*. opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics" rel="nofollow">http://www.google-analytics</a>. com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ". Either the 'unsafe-inline' keyword, a hash ('sha256- ELg93MD7QhyUK236bGdLa8gLVEq0Yq juVrg6uo6dwgw='), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*. googlesyndication. com https://*. doubleclick.net <a href="https://partner" rel="nofollow">https://partner</a>. googleadservices.com <a href="https://www.googletagservices" rel="nofollow">https://www.googletagservices</a>. com <a href="https://ssl.google-analytics" rel="nofollow">https://ssl.google-analytics</a>. com <a href="https://www.google-analytics" rel="nofollow">https://www.google-analytics</a>. com <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg" rel="nofollow">https://d3clqjduf2gvxg</a>. cloudfront.net <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*. firebaseio.com https://*. tokbox.com https://*. opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics" rel="nofollow">http://www.google-analytics</a>. com <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ". Either the 'unsafe-inline' keyword, a hash ('sha256-k8Kx+oSRaLZ+X7/ r67j0Mow6bzS2pemyX++9YAOg3BU=' ), or a nonce ('nonce-...') is required to enable inline execution. and Failed to load resource: the server responded with a status of 403 (Forbidden)&nbsp; s3.amazonaws.com/ files.d20.io/images/28859460/ lTd0WuOepGuhEF6w6POywQ/thumb. png?148719354755:1 Please advise. All thanks!

Do the token have the "Has Sight" checkbox enabled and is there a token that emits light on the VTT?

Thanks for taking the time to respond Kyle G. The token did not. I have marked it accordingly and will have the player reload. Thanks in advance if that gets it!