I got the same issue in Chrome, Firefox and Edge. Here are my Logs i hope it helps. I use Windows 10 pro ( Windows 10, version 1909 ) . Firefox Console Log (75.0) : Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). editor :12:1 Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). editor :13:1 Quellübergreifende (Cross-Origin) Anfrage blockiert: Die Gleiche-Quelle-Regel verbietet das Lesen der externen Ressource auf <a href="https://browser.sentry-cdn.com/5.15.4/bundle.min.js" rel="nofollow">https://browser.sentry-cdn.com/5.15.4/bundle.min.js</a> . (Grund: CORS-Anschlag schlug fehl). Keine der "sha384"-Hashes im "integrity"-Attribut stimmen mit dem Inhalt der Subressource überein. editor JQMIGRATE: Logging is active jquery.migrate.js :20:10 Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). 3 jquery-1.9.1.js :1444:6 Content Security Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf inline blockiert ("script-src"). 3 jquery-1.9.1.js :1450:5 Diese Seite verwendet die nicht standardisierte Eigenschaft "zoom". Stattdessen sollte calc() in den entsprechenden Eigenschaftswerten oder "transform" zusammen mit "transform-origin: 0 0" verwendet werden. editor ReferenceError: Sentry is not defined startjs :1:1 ReferenceError: d20ext is not defined loading.js :1:1 RTCIceServer.url is deprecated! Use urls instead. 3 app.js :278 TypeError: window.d20ext is undefined app.js :547:16942 tuts loaded tutorial_tips.js :7:10 Chrome Console Log ( Version 81.0.4044.113 ) : /editor/:12 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-DgbMyUh4GIPURPxR' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com". Either the 'unsafe-inline' keyword, a hash ('sha256-FPsTQ4pRsyR1Oj8BMGVEFdohWLwqajmtTaQURee3rQQ='), or a nonce ('nonce-...') is required to enable inline execution.
/editor/:13 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'nonce-DgbMyUh4GIPURPxR' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com". Either the 'unsafe-inline' keyword, a hash ('sha256-/XHNKTzdVLpPBcMgsOl9LN6PEC5ufZbaLdoU14BWKr0='), or a nonce ('nonce-...') is required to enable inline execution.
/editor/:14 GET <a href="https://browser.sentry-cdn.com/5.15.4/bundle.min.js" rel="nofollow">https://browser.sentry-cdn.com/5.15.4/bundle.min.js</a> net::ERR_NAME_NOT_RESOLVED
jquery.migrate.js:20 JQMIGRATE: Logging is active
?timestamp=1587256801&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:1 Uncaught ReferenceError: Sentry is not defined
at ?timestamp=1587256801&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:1
(anonymous) @ ?timestamp=1587256801&disablewebgl=false&forcelongpolling=false&offsite=false&fbdebug=false&forcetouch=false:1
loading.js?v=11:1 Uncaught ReferenceError: d20ext is not defined
at loading.js?v=11:1
(anonymous) @ loading.js?v=11:1
app.js?1587138067:547 Uncaught TypeError: Cannot read property 'siteURL' of undefined
at app.js?1587138067:547
at app.js?1587138067:586
(anonymous) @ app.js?1587138067:547
(anonymous) @ app.js?1587138067:586
tutorial_tips.js:7 tuts loaded
app.roll20.net/:1 [DOM] Found 3 elements with non-unique id #0: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <input class="filter-search_filter-value filtername" data-filter-num="name" data-match-type="Any" id="0" name="Name" type="text" value> <select name="Item Type[]" id="0" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="0" data-match-type="Exact" placeholder="Select Some Options">…</select> <input class="filter-search_filter-value filtername" data-filter-num="name" data-match-type="Any" id="0" name="Name" type="text" value>
app.roll20.net/:1 [DOM] Found 3 elements with non-unique id #1: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Level[]" id="1" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="1" data-match-type="Any" placeholder="Select Some Options">…</select> <select aria-selected="true" class="chosen filter-search_filter-value" data-filter-num="1" data-match-type="Exact" id="1" multiple name="expansion">…</select> <select name="Alignment[]" id="1" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="1" data-match-type="Any" placeholder="Select Some Options">…</select>
app.roll20.net/:1 [DOM] Found 2 elements with non-unique id #2: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Classes[]" id="2" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="2" data-match-type="Any" placeholder="Select Some Options">…</select> <input class="filter-search_filter-value" data-filter-num="2" data-match-type="Any" id="2" name="Speed" type="text" value>
app.roll20.net/:1 [DOM] Found 2 elements with non-unique id #3: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="School[]" id="3" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="3" data-match-type="Any" placeholder="Select Some Options">…</select> <select name="Type[]" id="3" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="3" data-match-type="Any" placeholder="Select Some Options">…</select>
app.roll20.net/:1 [DOM] Found 2 elements with non-unique id #6: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Casting Time[]" id="6" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="6" data-match-type="Any" placeholder="Select Some Options">…</select> <select name="Languages[]" id="6" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="6" data-match-type="Any" placeholder="Select Some Options">…</select>
app.roll20.net/:1 [DOM] Found 2 elements with non-unique id #7: (More info: <a href="https://goo.gl/9p2vKq" rel="nofollow">https://goo.gl/9p2vKq</a>) <select name="Range[]" id="7" class="chosen filter-search_filter-value multiselect" multiple="multiple" aria-selected="true" data-filter-num="7" data-match-type="Any" placeholder="Select Some Options">…</select> <select aria-selected="true" class="chosen filter-search_filter-value" data-filter-num="7" data-match-type="Any" id="7" multiple name="expansion">…</select> Edge Console Log (Build 18363 ) : HTML1300: Navigation wurde ausgeführt. editor (1,1) CSP14321: Die Direktive script-src 'self' 'unsafe-eval' 'nonce-QXc0DEuiqZmnl2Zh' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com in Content-Security-Policy: inline script in <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a> in Zeile 11, Spalte 8 wurde durch eine Ressource verletzt. Die Ressource wird blockiert. CSP14321: Die Direktive script-src 'self' 'unsafe-eval' 'nonce-QXc0DEuiqZmnl2Zh' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com in Content-Security-Policy: inline script in <a href="https://app.roll20.net/editor/" rel="nofollow">https://app.roll20.net/editor/</a> in Zeile 12, Spalte 8 wurde durch eine Ressource verletzt. Die Ressource wird blockiert. 3 CSP14312: Die Direktive script-src 'self' 'unsafe-eval' 'nonce-QXc0DEuiqZmnl2Zh' <a href="http://cdn.inspectlet.com" rel="nofollow">http://cdn.inspectlet.com</a> https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com" rel="nofollow">http://stun.l.google.com</a> *.sentry-cdn.com in Content-Security-Policy wurde durch eine Ressource verletzt: inline script. Die Ressource wird blockiert. JQMIGRATE: Logging is active jquery.migrate.js (20,2) 5 HTML1500: Die Markierung kann nicht selbstschließend sein. Verwenden Sie eine explizite schließende Markierung. editor (26,144) CSS3121: Die Medienabfrage -ms-viewport ist veraltet. 0: 'Sentry' is not defined startjs (1,1) 0: 'd20ext' is not defined loading.js (1,1) tuts loaded tutorial_tips.js (7,2) 0: Unable to get property 'siteURL' of undefined or null reference app.js (546,16941)