For the sake of completeness I'm also adding the differences between the two browsers. My main browser for Roll20 is Google Chrome, but I'm adding Firefox for archival purposes (in case someone runs into this same issue and they use Firefox. I'm not adding Firefox's Console Log for the fact that they have the same symptoms and they would likely say the same thing) Edit: Apologies for the hyperlinks. I don't know how to get rid of them. Please don't click on them. I don't know if they lead anywhere, and if they do I don't want people getting viruses. My explanation of the issue is in the first post. Web Browser: Google Chrome (or Firefox) Browser Version: Well, both Chrome and Firefox don’t let me
open without updating, so I’m assuming the latest version. Operating System: Windows 8.1 Javascript is enabled. Anti-virus software: McAfee Browser extensions: AdBlocker (I disabled it for the site),
McAfee web advisor. (Google Translate for Firefox, but not Chrome) Console Log (Google Chrome): Refused to execute inline script because it violates the
following Content Security Policy directive: "script-src 'self'
'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net
<a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a>
<a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a>
<a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a>
<a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a>
https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com
<a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ".
Either the 'unsafe-inline' keyword, a hash
('sha256-WFnG2qNcIRXSzLPPytOeriNFTH7XBSvmNs89bJ8UDC8='), or a nonce ('nonce-...')
is required to enable inline execution. app.roll20.net/:13 Refused to execute inline script because
it violates the following Content Security Policy directive: "script-src
'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net
<a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a>
<a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a>
<a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a>
<a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a>
https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com
<a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ".
Either the 'unsafe-inline' keyword, a hash
('sha256-+3W9zufhVFpD1XwP4aFx3yWExD//7uoJ+EnLO3a9V0Q='), or a nonce
('nonce-...') is required to enable inline execution. jquery.migrate.js:20 JQMIGRATE: Logging is active app.roll20.net/:5273 Refused to execute inline script
because it violates the following Content Security Policy directive:
"script-src 'self' 'unsafe-eval' https://*.googlesyndication.com
https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a>
<a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a>
<a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a>
<a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a>
<a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com
https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ".
Either the 'unsafe-inline' keyword, a hash
('sha256-vileAyXucIHIT+3pbOzFP62jSSQqBYQ/DZ/WZAa5v4Y='), or a nonce
('nonce-...') is required to enable inline execution. app.js?1562081990:541 70 app.js?1562081990:543 TOUCH SUPPORTED: false app.js?1562081990:543 USING WEBGL ACCELERATION... app.js?1562081990:543 WEBGL STARTUP SUCCESS app.js?1562081990:545 Custom Sheet Translation app.js?1562081990:536 select app.js?1562081990:536 Switch mode to select app.js?1562081990:557 Initializing new dice engine with
randomness... app.js?1562081990:557 Using random entropy app.js?1562081990:560 Compiling sheet... app.js?1562081990:560 Found rolltemplate: simple app.js?1562081990:560 Found rolltemplate: atk app.js?1562081990:560 Found rolltemplate: dmg app.js?1562081990:560 Found rolltemplate: atkdmg app.js?1562081990:560 Found rolltemplate: desc app.js?1562081990:560 Found rolltemplate: spell app.js?1562081990:560 Found rolltemplate: traits app.js?1562081990:560 Found rolltemplate: npc app.js?1562081990:560 Found rolltemplate: npcatk app.js?1562081990:560 Found rolltemplate: npcdmg app.js?1562081990:560 Found rolltemplate: npcaction app.js?1562081990:560 Found rolltemplate: mancerroll app.js?1562081990:560 Found rolltemplate: mancerhproll app.js?1562081990:560 Found Charactermancer Repeating
Section: topbar app.js?1562081990:560 Found Charactermancer Repeating
Section: leveler-topbar app.js?1562081990:560 Found Charactermancer Repeating
Section: row app.js?1562081990:560 Found Charactermancer Repeating
Section: utilityrow app.js?1562081990:560 Found Charactermancer Repeating
Section: choose app.js?1562081990:560 Found Charactermancer Repeating
Section: custom-proficiency app.js?1562081990:560 Found Charactermancer Repeating
Section: custom-trait app.js?1562081990:560 Found Charactermancer Repeating
Section: spell-holder app.js?1562081990:560 Found Charactermancer Repeating
Section: spell-item app.js?1562081990:560 Found Charactermancer Repeating
Section: asi-row app.js?1562081990:560 Found Charactermancer Repeating
Section: hpbylevel app.js?1562081990:560 Found Charactermancer Template:
l1-welcome app.js?1562081990:560 Found Charactermancer Template:
l1-race app.js?1562081990:560 Found Charactermancer Template:
l1-class app.js?1562081990:560 Found Charactermancer Template:
l1-abilities app.js?1562081990:560 Found Charactermancer Template:
l1-background app.js?1562081990:560 Found Charactermancer Template:
l1-equipment app.js?1562081990:560 Found Charactermancer Template:
l1-spells app.js?1562081990:560 Found Charactermancer Template:
l1-feat app.js?1562081990:560 Found Charactermancer Template: l1-bio app.js?1562081990:560 Found Charactermancer Template:
l1-summary app.js?1562081990:560 Found Charactermancer Template: final app.js?1562081990:560 Found Charactermancer Template:
lp-welcome app.js?1562081990:560 Found Charactermancer Template:
lp-levels app.js?1562081990:560 Found Charactermancer Template:
lp-choices app.js?1562081990:560 Found Charactermancer Template: lp-asi app.js?1562081990:560 Found Charactermancer Template:
lp-spells app.js?1562081990:560 Found Charactermancer Template:
lp-summary app.js?1562081990:560 Found Charactermancer Template:
lp-spellchoice app.js?1562081990:560 Found webworker script app.js?1562081990:560 Finding sheet rolls... app.js?1562081990:561 Including compendium template css. app.js?1562081990:563 window resize app.js?1562081990:543 Final set zoom! app.js?1562081990:542 UPDATE GL SIZE! app.js?1562081990:543 Final set zoom! tutorial_tips.js:7 tuts loaded 28Mixed Content: The page at '<URL>' was loaded over
HTTPS, but requested an insecure image '<URL>'. This content should also
be served over HTTPS. app.js?1562081990:551 Final page load. app.js?1562081990:563 Refresh jukebox List! app.js?1562081990:551 Scan for new plays! sheetsandboxworker.js?1562434569417:682 Starting up WEB
WORKER gpt.js:1 Refused to load the script
' <a href="https://adservice.google.com/adsid/integrator.js?domain=app.roll20.net" rel="nofollow">https://adservice.google.com/adsid/integrator.js?domain=app.roll20.net</a> '
because it violates the following Content Security Policy directive:
"script-src 'self' 'unsafe-eval' https://*.googlesyndication.com
https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a>
<a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a>
<a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a>
<a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a>
<a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com
https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ". Note
that 'script-src-elem' was not explicitly set, so 'script-src' is used as a
fallback. pc @ gpt.js:1 gpt.js:1 Refused to load the script
' <a href="https://adservice.google.com/adsid/integrator.js?domain=app.roll20.net" rel="nofollow">https://adservice.google.com/adsid/integrator.js?domain=app.roll20.net</a> '
because it violates the following Content Security Policy directive:
"script-src 'self' 'unsafe-eval' https://*.googlesyndication.com
https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a>
<a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a>
<a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a>
<a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a>
<a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com
https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ". Note
that 'script-src-elem' was not explicitly set, so 'script-src' is used as a
fallback. b @ gpt.js:1 app.js?1562081990:549 Auth'ed. app.js?1562081990:549 Go post auth! app.js?1562081990:549 initial setup app.js?1562081990:547 T.i app.js?1562081990:549 Got players value... app.js?1562081990:550 joining game... 5app.js?1562081990:547 Full load page! app.js?1562081990:549 We have 5 pages app.js?1562081990:555 refershing page listings! app.js?1562081990:548 Player -LhOiWZNotXvBpe_h3Uy is
offline... app.js?1562081990:228 THREE.WebGLRenderer 69 app.js?1562081990:548 Global Volume: 0=0 app.js?1562081990:550 Deferred finish joining... app.js?1562081990:541 Firebase Online app.js?1562081990:549 handle page changes app.js?1562081990:549 false app.js?1562081990:551 Scan for new plays! app.js?1562081990:563 Refresh jukebox List! app.js?1562081990:555 refershing page listings! app.js?1562081990:550 init active page! app.js?1562081990:547 activate page! app.js?1562081990:547 FULLY ACTIVATE VIEWS FOR PAGE. app.js?1562081990:547 Graphics: 0 app.js?1562081990:547 Paths: 0 app.js?1562081990:555 refershing page listings! app.js?1562081990:547 Reorder by ZORDER app.js?1562081990:545 Do refresh link cache! app.js?1562081990:547 Reorder by ZORDER app.js?1562081990:560 Refresh Journal List! app.js?1562081990:560 Search took 101ms pubads_impl_2019062401.js:1 Refused to load the script
' <a href="https://cdn.ampproject.org/rtv/011906111828200/amp4ads-host-v0.js" rel="nofollow">https://cdn.ampproject.org/rtv/011906111828200/amp4ads-host-v0.js</a> ' because it
violates the following Content Security Policy directive: "script-src
'self' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net
<a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a>
<a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a>
<a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a>
<a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a>
https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com
<a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a>
<a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> ". Note
that 'script-src-elem' was not explicitly set, so 'script-src' is used as a
fallback. _.ie @ pubads_impl_2019062401.js:1 app.js?1562081990:546 Swapping
<a href="https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/thumb.png?15608238305" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/thumb.png?15608238305</a>
to
<a href="https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/max.png?15608238305" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/max.png?15608238305</a> app.js?1562081990:540 Executing swap, new source:
<a href="https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/max.png?15608238305" rel="nofollow">https://s3.amazonaws.com/files.d20.io/images/84252381/Z4S6CogIMUPDfj-Cw-ufsw/max.png?15608238305</a> app.js?1562081990:547 Reorder by ZORDER amp-inabox.js:141 Powered by AMP ⚡
HTML – Version 1906111828200 <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a> app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:552 Show Character View Dialog! app.js?1562081990:552 DELAY RENDER FOR ATTRIBUTES! app.js?1562081990:545 189 app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:549 handle page changes app.js?1562081990:549 false app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:550 init active page! app.js?1562081990:547 activate page! app.js?1562081990:547 FULLY ACTIVATE VIEWS FOR PAGE. app.js?1562081990:547 Graphics: 5 app.js?1562081990:547 Paths: 2 app.js?1562081990:555 refershing page listings! app.js?1562081990:547 Reorder by ZORDER app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:541 Timeout ref showed error! app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:552 --- RENDER CHARACTIVE VIEW ---- app.js?1562081990:552 Redoing charsheet html app.js?1562081990:552 4139ms to end of html app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent VM12:4669 5th Edition OGL by Roll20 v2.7 app.js?1562081990:552 Really updating character sheet values app.js?1562081990:553 Foudn a pre-defined key order! app.js?1562081990:552 Setting up repeating sections took
until 7267ms app.js?1562081990:552 Updating ALL VALUES app.js?1562081990:552 Finding list of dirty attributes took
until 7305ms app.js?1562081990:552 Querytest took until 7321ms app.js?1562081990:552 Attribute cache compliation took until
7348ms app.js?1562081990:552 Set values (including auto-calcuating
variables) took until 12152ms app.js?1562081990:552 Appending to screen took until 14996ms app.js?1562081990:552 Took 15038ms app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:563 window resize app.js?1562081990:543 Final set zoom! app.js?1562081990:542 UPDATE GL SIZE! app.js?1562081990:543 Final set zoom! app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:552 Show Character View Dialog! app.js?1562081990:552 --- RENDER CHARACTIVE VIEW ---- app.js?1562081990:552 Redoing charsheet html app.js?1562081990:552 1721ms to end of html app.js?1562081990:545 189 app.js?1562081990:552 Really updating character sheet values app.js?1562081990:553 Foudn a pre-defined key order! app.js?1562081990:552 Setting up repeating sections took
until 675ms app.js?1562081990:552 Updating ALL VALUES app.js?1562081990:552 Finding list of dirty attributes took
until 681ms app.js?1562081990:552 Querytest took until 692ms app.js?1562081990:552 Attribute cache compliation took until
704ms app.js?1562081990:552 Set values (including auto-calcuating
variables) took until 1290ms app.js?1562081990:552 Appending to screen took until 1860ms app.js?1562081990:552 Took 1990ms VM12:4669 5th Edition OGL by Roll20 v2.7 app.js?1562081990:555 MESSAGE RECEIVED app.js?1562081990:555 MessageEvent app.js?1562081990:563 window resize app.js?1562081990:543 Final set zoom! app.js?1562081990:542 UPDATE GL SIZE!
app.js?1562081990:543 Final set zoom! Addendum: I'm using a hotspot rather than a router if that's of any help.