Ok, so 1. The issue is simply I am unable to load any tokens from characters from the roll20 Curse of Strahd Package when I previously could. 2. The issue is reproduced by trying to drag in a Curse of Strahd token from the journal. 3. I'm using Chrome 68.0.3440.106, Windows 10, Javascript is enabled, and I have Malwarebytes for anti-virus software. 4. The console log: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-tNPou0Rb7cGqKF6QQsBaZ7VsgAabtbfh1W375zzCovA='), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-k8Kx+oSRaLZ+X7/r67j0Mow6bzS2pemyX++9YAOg3BU='), or a nonce ('nonce-...') is required to enable inline execution. jquery.migrate.js:20 JQMIGRATE: Logging is active app.js?1536332943:343 70 app.js?1536332943:344 TOUCH SUPPORTED: false app.js?1536332943:344 USING WEBGL ACCELERATION... app.js?1536332943:344 WEBGL STARTUP SUCCESS app.js?1536332943:346 Custom Sheet Translation app.js?1536332943:338 select app.js?1536332943:338 Switch mode to select app.js?1536332943:357 Initializing new dice engine with randomness... app.js?1536332943:357 Using random entropy app.js?1536332943:360 Compiling sheet... app.js?1536332943:360 Found rolltemplate: simple app.js?1536332943:360 Found rolltemplate: atk app.js?1536332943:360 Found rolltemplate: dmg app.js?1536332943:360 Found rolltemplate: atkdmg app.js?1536332943:360 Found rolltemplate: desc app.js?1536332943:360 Found rolltemplate: spell app.js?1536332943:360 Found rolltemplate: traits app.js?1536332943:360 Found rolltemplate: npc app.js?1536332943:360 Found rolltemplate: npcatk app.js:360 Found rolltemplate: npcdmg app.js:360 Found rolltemplate: npcaction app.js:360 Found rolltemplate: mancerroll app.js:360 Found Charactermancer template: l1-welcome app.js:360 Found Charactermancer template: l1-race app.js:360 Found Charactermancer template: l1-class app.js:360 Found Charactermancer template: l1-abilities app.js:360 Found Charactermancer template: l1-background app.js:360 Found Charactermancer template: l1-equipment app.js:360 Found Charactermancer template: l1-spells app.js:360 Found Charactermancer template: l1-feat app.js:360 Found Charactermancer template: l1-summary app.js:360 Found Charactermancer template: final 2app.js:360 Found webworker script app.js:360 Finding sheet rolls... app.js:360 Including compendium template css. app.js:362 window resize app.js:345 Final set zoom! app.js:344 UPDATE GL SIZE! app.js:345 Final set zoom! tutorial_tips.js:7 tuts loaded 7Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure image '<URL>'. This content should also be served over HTTPS. app.js:355 MESSAGE RECEIVED app.js:355 MessageEvent app.js:355 MESSAGE RECEIVED app.js:355 MessageEvent app.js:355 MESSAGE RECEIVED app.js:355 MessageEvent sheetsandboxworker.js?1536590381029:532 Starting up WEB WORKER sheetsandboxworker.js?1536590381038:532 Starting up WEB WORKER sheetsandboxworker.js?1536590381029:532 Starting up WEB WORKER sheetsandboxworker.js?1536590381038:532 Starting up WEB WORKER app.js:351 Final page load. app.js:363 Refresh jukebox List! app.js:351 Auth'ed. app.js:351 Go post auth! app.js:351 initial setup app.js:349 T.i app.js:355 refershing page listings! app.js:351 Got players value... app.js:351 joining game... app.js:349 Player -LDjFO6O_yAj60tOx_ye is offline... app.js:349 Player -LDmWzjOF6NmfVUAg3MX is offline... app.js:349 Global Volume: 100=1 app.js:349 Player -LDtiIYkvWyiWweBn-Df is offline... app.js:349 Player -LIMAelBf7KZFvA04iFA is offline... app.js:349 Player -LKTxDIBkObFp_7sw4V2 is offline... app.js:349 Player -LLzATdt1AJJ3T31hqZN is offline... app.js:351 Deferred finish joining... app.js:343 Firebase Online 38app.js:348 Full load page! app.js:351 We have 38 pages app.js:359 Refresh Journal List! app.js:359 Search took 8ms app.js:351 Scan for new plays! app.js:351 handle page changes app.js:351 false app.js:351 init active page! app.js:348 activate page! app.js:348 FULLY ACTIVATE VIEWS FOR PAGE. app.js:363 Refresh jukebox List! app.js:370 Video Quality medium app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/thumb.jpg?1493662201&14979024575" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/thumb.jpg?1493662201&14979024575</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/original.jpg?1493662201&14979024575" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/original.jpg?1493662201&14979024575</a> app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/thumb.png?1493662658&14979024645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/thumb.png?1493662658&14979024645</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/med.png?1493662658&14979024645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/med.png?1493662658&14979024645</a> app.js:347 Do refresh link cache! app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/thumb.png?1493662658&14979024705" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/thumb.png?1493662658&14979024705</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/max.png?1493662658&14979024705" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/max.png?1493662658&14979024705</a> app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/thumb.png?1493662658&14979024725" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/thumb.png?1493662658&14979024725</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/med.png?1493662658&14979024725" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/med.png?1493662658&14979024725</a> app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/thumb.png?1493662658&14979024735" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/thumb.png?1493662658&14979024735</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/med.png?1493662658&14979024735" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/med.png?1493662658&14979024735</a> app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/thumb.png?1493662659&14979024755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/thumb.png?1493662659&14979024755</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/med.png?1493662659&14979024755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/med.png?1493662659&14979024755</a> app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/thumb.png?1493662659&14979024785" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/thumb.png?1493662659&14979024785</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/med.png?1493662659&14979024785" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/med.png?1493662659&14979024785</a> s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?15286486605:1 Failed to load resource: the server responded with a status of 403 (Forbidden) s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?15286486565:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:344 new lamp app.js:342 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660</a> app.js:342 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656</a> app.js:344 new lamp 3app.js:347 setting src app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0. 2app.js?1536332943:347 setting src app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0. app.js?1536332943:347 setting src app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0. s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656:1 Failed to load resource: the server responded with a status of 403 (Forbidden) s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:359 Refresh Journal List! app.js:359 Search took 124ms app.js:347 setting src app.js:342 Cols: 5 Rows: 4 app.js:342 Took 114ms to generate cache. app.js:348 Graphics: 24 app.js:348 Paths: 40 app.js:355 refershing page listings! 40app.js:343 new caster! 2app.js:348 Reorder by ZORDER app.js:362 window resize app.js:345 Final set zoom! app.js:344 UPDATE GL SIZE! app.js:345 Final set zoom! app.js:362 window resize app.js:345 Final set zoom! app.js:344 UPDATE GL SIZE! app.js?1536332943:345 Final set zoom! app.js?1536332943:355 MESSAGE RECEIVED app.js?1536332943:355 MessageEvent app.js?1536332943:362 Body drop! app.js?1536332943:362 drop on upper canvas firebase.2.4.0.js:45 FIREBASE WARNING: Exception was thrown by user callback. SyntaxError: Unexpected end of JSON input at JSON.parse (<anonymous>) at <a href="https://app.roll20.net/assets/app.js?1536332943:362:11330" rel="nofollow">https://app.roll20.net/assets/app.js?1536332943:362:11330</a> at <a href="https://app.roll20.net/assets/app.js?1536332943:353:2394" rel="nofollow">https://app.roll20.net/assets/app.js?1536332943:353:2394</a> at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:710" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:710</a> at gc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a>) at cc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a>) at dc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a>) at Object.I (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a>) at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:3" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:3</a> at Qh.h.Ld (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a>) S @ firebase.2.4.0.js:45 firebase.2.4.0.js:52 Uncaught SyntaxError: Unexpected end of JSON input at JSON.parse (<anonymous>) at app.js?1536332943:362 at app.js?1536332943:353 at firebase.2.4.0.js:201 at gc (firebase.2.4.0.js:52) at cc (firebase.2.4.0.js:30) at dc (firebase.2.4.0.js:29) at Object.I (firebase.2.4.0.js:218) at firebase.2.4.0.js:183 at Qh.h.Ld (firebase.2.4.0.js:188) app.js?1536332943:362 window resize app.js?1536332943:345 Final set zoom! app.js?1536332943:344 UPDATE GL SIZE! app.js?1536332943:345 Final set zoom! app.js?1536332943:362 window resize app.js?1536332943:345 Final set zoom! app.js?1536332943:344 UPDATE GL SIZE! app.js?1536332943:345 Final set zoom! app.js?1536332943:362 window resize app.js?1536332943:345 Final set zoom! app.js?1536332943:344 UPDATE GL SIZE! app.js?1536332943:345 Final set zoom!