Hi and thank you for the quick reply. I tried the following but unfortunately it didn't work. Leaving you with a full bug report here. Description: When in a Roll20 game I click the Art Library and search for tokens/maps etc. Several results come up and when I click a Premium Asset I don't already own a pop-up window appears. It remains white for a few seconds before a frowning face with the text "marketplace.roll20.net refused to respond". In Firefox it remained white. Marketplace worked for me up until this week. Operating System: Windows 10 (64 bit) Web browser: Chrome 74.0.3729.169 Javascript is enabled/allowed Anti-virus software: Nothing beyond Windows Defender Current browser extensions: BetterTTV, Google Docs Offline, Docs, Sheets, Slides, GeForce Experience Stream Client Console Log (made the text of a suspicious response FAT and underlined ): Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-wpbgEllHSuo6Ok7gLjx6RoTqUcl3YZI7d/AMIccRtJA='), or a nonce ('nonce-...') is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-+3W9zufhVFpD1XwP4aFx3yWExD//7uoJ+EnLO3a9V0Q='), or a nonce ('nonce-...') is required to enable inline execution. /v2/js/jquery.migrate.js:20 JQMIGRATE: Logging is active app.roll20.net/:5348 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a>". Either the 'unsafe-inline' keyword, a hash ('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce ('nonce-...') is required to enable inline execution. app.js:541 70 app.js:543 TOUCH SUPPORTED: false app.js:543 USING WEBGL ACCELERATION... app.js:543 WEBGL STARTUP SUCCESS app.js:545 Custom Sheet Translation app.js:536 select app.js:536 Switch mode to select app.js:557 Initializing new dice engine with randomness... app.js:557 Using random entropy app.js:560 Compiling sheet... app.js:560 Found rolltemplate: simple app.js:560 Found rolltemplate: atk app.js:560 Found rolltemplate: dmg app.js:560 Found rolltemplate: atkdmg app.js:560 Found rolltemplate: desc app.js:560 Found rolltemplate: spell app.js:560 Found rolltemplate: traits app.js:560 Found rolltemplate: npc app.js:560 Found rolltemplate: npcatk app.js:560 Found rolltemplate: npcdmg app.js:560 Found rolltemplate: npcaction app.js:560 Found rolltemplate: mancerroll app.js:560 Found rolltemplate: mancerhproll app.js:560 Found Charactermancer Repeating Section: topbar app.js:560 Found Charactermancer Repeating Section: leveler-topbar app.js:560 Found Charactermancer Repeating Section: row app.js:560 Found Charactermancer Repeating Section: utilityrow app.js:560 Found Charactermancer Repeating Section: choose app.js:560 Found Charactermancer Repeating Section: custom-proficiency app.js:560 Found Charactermancer Repeating Section: custom-trait app.js:560 Found Charactermancer Repeating Section: spell-holder app.js:560 Found Charactermancer Repeating Section: spell-item app.js:560 Found Charactermancer Repeating Section: asi-row app.js:560 Found Charactermancer Repeating Section: hpbylevel app.js:560 Found Charactermancer Template: l1-welcome app.js:560 Found Charactermancer Template: l1-race app.js:560 Found Charactermancer Template: l1-class app.js:560 Found Charactermancer Template: l1-abilities app.js:560 Found Charactermancer Template: l1-background app.js:560 Found Charactermancer Template: l1-equipment app.js:560 Found Charactermancer Template: l1-spells app.js:560 Found Charactermancer Template: l1-feat app.js:560 Found Charactermancer Template: l1-bio app.js:560 Found Charactermancer Template: l1-summary app.js:560 Found Charactermancer Template: final app.js:560 Found Charactermancer Template: lp-welcome app.js:560 Found Charactermancer Template: lp-levels app.js:560 Found Charactermancer Template: lp-choices app.js:560 Found Charactermancer Template: lp-asi app.js:560 Found Charactermancer Template: lp-spells app.js:560 Found Charactermancer Template: lp-summary app.js:560 Found Charactermancer Template: lp-spellchoice app.js:560 Found webworker script app.js:560 Finding sheet rolls... app.js:560 Including compendium template css. app.js:563 window resize app.js:543 Final set zoom! app.js:542 UPDATE GL SIZE! app.js:543 Final set zoom! tutorial_tips.js:7 tuts loaded 10Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure image '<URL>'. This content should also be served over HTTPS. sheetsandboxworker.js?1558655140592:682 Starting up WEB WORKER app.js:551 Final page load. app.js:563 Refresh jukebox List! app.js:551 Scan for new plays! app.js:549 Auth'ed. app.js:549 Go post auth! app.js:549 initial setup app.js:563 Refresh jukebox List! app.js:547 T.i app.js:549 Got players value... app.js:549 joining game... 9app.js:547 Full load page! app.js:549 We have 9 pages app.js:555 refershing page listings! app.js:548 Player -LSH7oLGyi2KpWZi--QK is offline... app.js:548 Global Volume: 8=0.0064 app.js:548 Player -LSLJb7LzbfWkVIl1A3f is offline... app.js:548 Player -LSLTzo3i6srEGSkxiB- is offline... app.js:548 Player -LSLcqoVk7Zfo-VcFSU6 is offline... app.js:548 Player -LX4nn1YeiGNRM8EZDEP is offline... app.js:549 Deferred finish joining... app.js:541 Firebase Online app.js:560 Refresh Journal List! app.js:560 Search took 4ms app.js:549 handle page changes app.js:549 false app.js:563 Refresh jukebox List! thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:549 init active page! app.js:547 activate page! app.js:547 FULLY ACTIVATE VIEWS FOR PAGE. thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:545 Do refresh link cache! app.js:560 Refresh Journal List! app.js:560 Search took 33ms app.js:551 Scan for new plays! app.js:547 Reorder by ZORDER thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:547 Graphics: 37 app.js:547 Paths: 0 thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:563 Refresh jukebox List! app.js:555 refershing page listings! app.js:547 Reorder by ZORDER app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/68768/x-5k53ep2lY9z9GXi85Lqg/thumb.jpg?14304193755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/68768/x-5k53ep2lY9z9GXi85Lqg/thumb.jpg?14304193755</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/68768/x-5k53ep2lY9z9GXi85Lqg/original.jpg?14304193755" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/68768/x-5k53ep2lY9z9GXi85Lqg/original.jpg?14304193755</a> thumb.jpg:1 Failed to load resource: the server responded with a status of 403 (Forbidden) app.js:547 Reorder by ZORDER app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184932/93rx2zbDkJz0IculPEbLWA/thumb.png?14768372645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184932/93rx2zbDkJz0IculPEbLWA/thumb.png?14768372645</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184932/93rx2zbDkJz0IculPEbLWA/med.png?14768372645" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184932/93rx2zbDkJz0IculPEbLWA/med.png?14768372645</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185070/GoKuXS8rGL15yZZrEWdvew/thumb.png?14768376075" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185070/GoKuXS8rGL15yZZrEWdvew/thumb.png?14768376075</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185070/GoKuXS8rGL15yZZrEWdvew/med.png?14768376075" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185070/GoKuXS8rGL15yZZrEWdvew/med.png?14768376075</a> 2app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184972/0uJ21BhSlNe8BhlqFnBD9w/thumb.png?14768373675" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184972/0uJ21BhSlNe8BhlqFnBD9w/thumb.png?14768373675</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184972/0uJ21BhSlNe8BhlqFnBD9w/med.png?14768373675" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184972/0uJ21BhSlNe8BhlqFnBD9w/med.png?14768373675</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185120/ezvbY-hoiSV5y6luL_zYng/thumb.png?14768377495" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185120/ezvbY-hoiSV5y6luL_zYng/thumb.png?14768377495</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185120/ezvbY-hoiSV5y6luL_zYng/med.png?14768377495" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185120/ezvbY-hoiSV5y6luL_zYng/med.png?14768377495</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184944/SwcYiA4FIGlqlIKFrkBS1w/thumb.png?14768372965" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184944/SwcYiA4FIGlqlIKFrkBS1w/thumb.png?14768372965</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184944/SwcYiA4FIGlqlIKFrkBS1w/med.png?14768372965" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184944/SwcYiA4FIGlqlIKFrkBS1w/med.png?14768372965</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/thumb.png?14768377105" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/thumb.png?14768377105</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/med.png?14768377105" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/med.png?14768377105</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/thumb.png?147683771055" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/thumb.png?147683771055</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/med.png?147683771055" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185106/PS7eRO_pG8AkFLRJKqrE0A/med.png?147683771055</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185206/ASYnTJiUhcagyhHrJtbotw/thumb.png?14768379765" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185206/ASYnTJiUhcagyhHrJtbotw/thumb.png?14768379765</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/185206/ASYnTJiUhcagyhHrJtbotw/med.png?14768379765" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/185206/ASYnTJiUhcagyhHrJtbotw/med.png?14768379765</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184968/auWktMKODWoew4_dUAsnVA/thumb.png?14768373585" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184968/auWktMKODWoew4_dUAsnVA/thumb.png?14768373585</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184968/auWktMKODWoew4_dUAsnVA/med.png?14768373585" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184968/auWktMKODWoew4_dUAsnVA/med.png?14768373585</a> app.js:546 Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184966/HicztaMOVdXRJv1haQfkPQ/thumb.png?14768373535" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184966/HicztaMOVdXRJv1haQfkPQ/thumb.png?14768373535</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/184966/HicztaMOVdXRJv1haQfkPQ/med.png?14768373535" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/184966/HicztaMOVdXRJv1haQfkPQ/med.png?14768373535</a> 12app.js:546 setting src app.js:570 DOMException t.errorLog @ app.js:570 app.js:547 Reorder by ZORDER app.js:545 289 app.roll20.net/:1 Refused to display '<a href="https://marketplace.roll20.net/browse/set/743/29-townsfolk-2/?inapp=true" rel="nofollow">https://marketplace.roll20.net/browse/set/743/29-townsfolk-2/?inapp=true</a>' in a frame because it set 'X-Frame-Options' to 'sameorigin'. app.js:563 window resize app.js:543 Final set zoom! app.js:542 UPDATE GL SIZE! app.js:543 Final set zoom! Thank you very much.
