Ok, so 1. The issue is simply I am unable to load any tokens from characters from the roll20 Curse of Strahd Package when I previously could. 2. The issue is reproduced by trying to drag in a Curse of Strahd token from the journal. 3. I'm using Chrome 68.0.3440.106, Windows 10, Javascript is enabled, and I have Malwarebytes for anti-virus software. 4. The console log:   Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-tNPou0Rb7cGqKF6QQsBaZ7VsgAabtbfh1W375zzCovA='), or a nonce ('nonce-...') is required to enable inline execution.     app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-k8Kx+oSRaLZ+X7/r67j0Mow6bzS2pemyX++9YAOg3BU='), or a nonce ('nonce-...') is required to enable inline execution.     jquery.migrate.js:20 JQMIGRATE: Logging is active  app.js?1536332943:343 70  app.js?1536332943:344 TOUCH SUPPORTED: false  app.js?1536332943:344 USING WEBGL ACCELERATION...  app.js?1536332943:344 WEBGL STARTUP SUCCESS  app.js?1536332943:346 Custom Sheet Translation  app.js?1536332943:338 select  app.js?1536332943:338 Switch mode to select  app.js?1536332943:357 Initializing new dice engine with randomness...  app.js?1536332943:357 Using random entropy  app.js?1536332943:360 Compiling sheet...  app.js?1536332943:360 Found rolltemplate: simple  app.js?1536332943:360 Found rolltemplate: atk  app.js?1536332943:360 Found rolltemplate: dmg  app.js?1536332943:360 Found rolltemplate: atkdmg  app.js?1536332943:360 Found rolltemplate: desc  app.js?1536332943:360 Found rolltemplate: spell  app.js?1536332943:360 Found rolltemplate: traits  app.js?1536332943:360 Found rolltemplate: npc  app.js?1536332943:360 Found rolltemplate: npcatk  app.js:360 Found rolltemplate: npcdmg  app.js:360 Found rolltemplate: npcaction  app.js:360 Found rolltemplate: mancerroll  app.js:360 Found Charactermancer template: l1-welcome  app.js:360 Found Charactermancer template: l1-race  app.js:360 Found Charactermancer template: l1-class  app.js:360 Found Charactermancer template: l1-abilities  app.js:360 Found Charactermancer template: l1-background  app.js:360 Found Charactermancer template: l1-equipment  app.js:360 Found Charactermancer template: l1-spells  app.js:360 Found Charactermancer template: l1-feat  app.js:360 Found Charactermancer template: l1-summary  app.js:360 Found Charactermancer template: final  2app.js:360 Found webworker script  app.js:360 Finding sheet rolls...  app.js:360 Including compendium template css.  app.js:362 window resize  app.js:345 Final set zoom!  app.js:344 UPDATE GL SIZE!  app.js:345 Final set zoom!  tutorial_tips.js:7 tuts loaded  7Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure image '<URL>'. This content should also be served over HTTPS.  app.js:355 MESSAGE RECEIVED  app.js:355 MessageEvent  app.js:355 MESSAGE RECEIVED  app.js:355 MessageEvent  app.js:355 MESSAGE RECEIVED  app.js:355 MessageEvent  sheetsandboxworker.js?1536590381029:532 Starting up WEB WORKER  sheetsandboxworker.js?1536590381038:532 Starting up WEB WORKER  sheetsandboxworker.js?1536590381029:532 Starting up WEB WORKER  sheetsandboxworker.js?1536590381038:532 Starting up WEB WORKER  app.js:351 Final page load.  app.js:363 Refresh jukebox List!  app.js:351 Auth'ed.  app.js:351 Go post auth!  app.js:351 initial setup  app.js:349 T.i  app.js:355 refershing page listings!  app.js:351 Got players value...  app.js:351 joining game...  app.js:349 Player -LDjFO6O_yAj60tOx_ye is offline...  app.js:349 Player -LDmWzjOF6NmfVUAg3MX is offline...  app.js:349 Global Volume: 100=1  app.js:349 Player -LDtiIYkvWyiWweBn-Df is offline...  app.js:349 Player -LIMAelBf7KZFvA04iFA is offline...  app.js:349 Player -LKTxDIBkObFp_7sw4V2 is offline...  app.js:349 Player -LLzATdt1AJJ3T31hqZN is offline...  app.js:351 Deferred finish joining...  app.js:343 Firebase Online  38app.js:348 Full load page!  app.js:351 We have 38 pages  app.js:359 Refresh Journal List!  app.js:359 Search took 8ms  app.js:351 Scan for new plays!  app.js:351 handle page changes  app.js:351 false  app.js:351 init active page!  app.js:348 activate page!  app.js:348 FULLY ACTIVATE VIEWS FOR PAGE.  app.js:363 Refresh jukebox List!  app.js:370 Video Quality medium  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/thumb.jpg?1493662201&14979024575" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/thumb.jpg?1493662201&14979024575</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/original.jpg?1493662201&14979024575" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321385/-sL2rogPwOYxOAl9f16R_w/original.jpg?1493662201&14979024575</a>  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/thumb.png?1493662658&14979024645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/thumb.png?1493662658&14979024645</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/med.png?1493662658&14979024645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321387/CgdUCwIkR-y7512nhrNTjw/med.png?1493662658&14979024645</a>  app.js:347 Do refresh link cache!  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/thumb.png?1493662658&14979024705" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/thumb.png?1493662658&14979024705</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/max.png?1493662658&14979024705" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321389/ujd1ynM_6hnjjzz03CD8Nw/max.png?1493662658&14979024705</a>  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/thumb.png?1493662658&14979024725" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/thumb.png?1493662658&14979024725</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/med.png?1493662658&14979024725" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321390/Shxpa25Reo759dn9dKdUOA/med.png?1493662658&14979024725</a>  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/thumb.png?1493662658&14979024735" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/thumb.png?1493662658&14979024735</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/med.png?1493662658&14979024735" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321391/nj6CyFAk7clUfFB8tzkQuw/med.png?1493662658&14979024735</a>  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/thumb.png?1493662659&14979024755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/thumb.png?1493662659&14979024755</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/med.png?1493662659&14979024755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321392/k95wL3uDWFZKEOhj6H4fVw/med.png?1493662659&14979024755</a>  app.js:347 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/thumb.png?1493662659&14979024785" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/thumb.png?1493662659&14979024785</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/med.png?1493662659&14979024785" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/321393/Y0UgWb6LN_Teou2tItMIqA/med.png?1493662659&14979024785</a>  s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?15286486605:1 Failed to load resource: the server responded with a status of 403 (Forbidden)  s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?15286486565:1 Failed to load resource: the server responded with a status of 403 (Forbidden)  app.js:344 new lamp  app.js:342 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660</a>  app.js:342 Error loading image, probably due to cors. Trying once without CORS for <a href="https://s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656</a>  app.js:344 new lamp  3app.js:347 setting src  app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0.  2app.js?1536332943:347 setting src  app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0.  app.js?1536332943:347 setting src  app.roll20.net/:1 [.Offscreen-For-WebGL-00000194991DDC80]RENDER WARNING: Render count or primcount is 0.  s3.amazonaws.com/files.d20.io/images/55814294/kigBjwfd5T6Hbvup24o7hQ/thumb.png?1528648656:1 Failed to load resource: the server responded with a status of 403 (Forbidden)  s3.amazonaws.com/files.d20.io/images/55814297/MktjXDxaB5xk_EEAruvW4w/thumb.png?1528648660:1 Failed to load resource: the server responded with a status of 403 (Forbidden)  app.js:359 Refresh Journal List!  app.js:359 Search took 124ms  app.js:347 setting src  app.js:342 Cols: 5 Rows: 4  app.js:342 Took 114ms to generate cache.  app.js:348 Graphics: 24  app.js:348 Paths: 40  app.js:355 refershing page listings!  40app.js:343 new caster!  2app.js:348 Reorder by ZORDER  app.js:362 window resize  app.js:345 Final set zoom!  app.js:344 UPDATE GL SIZE!  app.js:345 Final set zoom!  app.js:362 window resize  app.js:345 Final set zoom!  app.js:344 UPDATE GL SIZE!  app.js?1536332943:345 Final set zoom!  app.js?1536332943:355 MESSAGE RECEIVED  app.js?1536332943:355 MessageEvent  app.js?1536332943:362 Body drop!  app.js?1536332943:362 drop on upper canvas  firebase.2.4.0.js:45 FIREBASE WARNING: Exception was thrown by user callback. SyntaxError: Unexpected end of JSON input      at JSON.parse (<anonymous>)      at <a href="https://app.roll20.net/assets/app.js?1536332943:362:11330" rel="nofollow">https://app.roll20.net/assets/app.js?1536332943:362:11330</a>      at <a href="https://app.roll20.net/assets/app.js?1536332943:353:2394" rel="nofollow">https://app.roll20.net/assets/app.js?1536332943:353:2394</a>      at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:710" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:710</a>      at gc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a>)      at cc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a>)      at dc (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a>)      at Object.I (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a>)      at <a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:3" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:3</a>      at Qh.h.Ld (<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a>)   S @ firebase.2.4.0.js:45  firebase.2.4.0.js:52 Uncaught SyntaxError: Unexpected end of JSON input      at JSON.parse (<anonymous>)      at app.js?1536332943:362      at app.js?1536332943:353      at firebase.2.4.0.js:201      at gc (firebase.2.4.0.js:52)      at cc (firebase.2.4.0.js:30)      at dc (firebase.2.4.0.js:29)      at Object.I (firebase.2.4.0.js:218)      at firebase.2.4.0.js:183      at Qh.h.Ld (firebase.2.4.0.js:188)  app.js?1536332943:362 window resize  app.js?1536332943:345 Final set zoom!  app.js?1536332943:344 UPDATE GL SIZE!  app.js?1536332943:345 Final set zoom!  app.js?1536332943:362 window resize  app.js?1536332943:345 Final set zoom!  app.js?1536332943:344 UPDATE GL SIZE!  app.js?1536332943:345 Final set zoom!  app.js?1536332943:362 window resize  app.js?1536332943:345 Final set zoom!  app.js?1536332943:344 UPDATE GL SIZE!  app.js?1536332943:345 Final set zoom!