Now Live! Demiplane + Roll20 Beta Integration!

I’d like to know this too?

They had me clear cache and, after fumbling around and logging in and out a few times it started working…

Just in case you all need to know, I an others are still getting the malformed rolls in Chat.

I copied the Error Message from my Chrome’s console … please pass it on to anyone who needs to see it:

jquery.migrate.js:20 JQMIGRATE: Logging is active
gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:235 Refused to load the script ‘https://bat.bing.com/bat.js’ because it violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-eval’ ‘nonce-m82xhMe79xIPSWL1’ ‘nonce-8ZIkcVb8iYPQCEj9’ ‘nonce-gVpJnnFW8DGFvqXn’ https://cdn.roll20.net blob: https://www.datadoghq-browser-agent.com http://cdn.inspectlet.com https://.googlesyndication.com https://.doubleclick.net https://.thedemiplane.com https://.demiplane.com https://partner.googleadservices.com https://www.googletagservices.com https://ssl.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://apis.google.com http://ajax.googleapis.com https://d3clqjduf2gvxg.cloudfront.net https://cdn.firebase.com https://.firebaseio.com https://.tokbox.com https://.opentok.com http://static.opentok.com http://www.google-analytics.com http://cdn.crowdin.com https://crowdin.com http://stun.l.google.com .sentry-cdn.com https://www.googletagmanager.com https://.refiner.io https://.maze.co”. Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.

uc @ gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:235Understand this error
CAMPAIGN ID: 19190852
vtt.bundle.4368031415fbfb542701.js:51806 USING WEBGL ACCELERATION…
vtt.bundle.4368031415fbfb542701.js:51806 WEBGL STARTUP SUCCESS
vue.esm-browser.js:12623 You are running a development build of Vue.
Make sure to use the production build (.prod.js) when deploying for production.
vtt.bundle.4368031415fbfb542701.js:51867 Loading Custom character sheets.
vtt.bundle.4368031415fbfb542701.js:6239 Activating Jumpgate/Legacy Bridge
Et @ vtt.bundle.4368031415fbfb542701.js:6239Understand this warning
vtt.bundle.4368031415fbfb542701.js:42552 BJS - [08:08:01]: Babylon.js v7.10.2 - WebGL2 - Parallel shader compilation
tutorial_tips.js:7 tuts loaded
gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:198 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src ‘self’ ‘unsafe-eval’ ‘nonce-m82xhMe79xIPSWL1’ ‘nonce-8ZIkcVb8iYPQCEj9’ ‘nonce-gVpJnnFW8DGFvqXn’ https://cdn.roll20.net blob: https://www.datadoghq-browser-agent.com http://cdn.inspectlet.com https://
.googlesyndication.com https://.doubleclick.net https://.thedemiplane.com https://.demiplane.com https://partner.googleadservices.com https://www.googletagservices.com https://ssl.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://apis.google.com http://ajax.googleapis.com https://d3clqjduf2gvxg.cloudfront.net https://cdn.firebase.com https://.firebaseio.com https://.tokbox.com https://.opentok.com http://static.opentok.com http://www.google-analytics.com http://cdn.crowdin.com https://crowdin.com http://stun.l.google.com .sentry-cdn.com https://www.googletagmanager.com https://.refiner.io https://*.maze.co". Either the ‘unsafe-inline’ keyword, a hash (‘sha256-77bgQblnRaKk1m8aq2FHqKiER4ywljc0EoTvK4RBca4=’), or a nonce (‘nonce-…’) is required to enable inline execution.

(anonymous) @ gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:198Understand this error
data:image/png;base…:1

       Failed to load resource: net::ERR_INVALID_URLUnderstand this error

gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:198 Refused to execute inline script because it violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-eval’ ‘nonce-m82xhMe79xIPSWL1’ ‘nonce-8ZIkcVb8iYPQCEj9’ ‘nonce-gVpJnnFW8DGFvqXn’ https://cdn.roll20.net blob: https://www.datadoghq-browser-agent.com http://cdn.inspectlet.com https://.googlesyndication.com https://.doubleclick.net https://.thedemiplane.com https://.demiplane.com https://partner.googleadservices.com https://www.googletagservices.com https://ssl.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://apis.google.com http://ajax.googleapis.com https://d3clqjduf2gvxg.cloudfront.net https://cdn.firebase.com https://.firebaseio.com https://.tokbox.com https://.opentok.com http://static.opentok.com http://www.google-analytics.com http://cdn.crowdin.com https://crowdin.com http://stun.l.google.com .sentry-cdn.com https://www.googletagmanager.com https://.refiner.io https://.maze.co”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-ZdDTEfl8xrGn7iZ/2mMDizDIe6JRmep2vz9STHJi4Zs=’), or a nonce (‘nonce-…’) is required to enable inline execution.

(anonymous) @ gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:198Understand this error
vtt.bundle.4368031415fbfb542701.js:6948 GPU tier: 3
R20ContentScript.js:1 Roll20 Campaign exporter loaded.
roll20.js:4152 Beyond20: Roll20 module loaded.
editor/:1 Access to XMLHttpRequest at ‘https://storage.googleapis.com/char-sheet-app-dff083b4/charsheets/marvelofficial/sheet.png?1690938584’ from origin ‘https://app.roll20.net’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.Understand this error
sheet.png:1

       Failed to load resource: net::ERR_FAILEDUnderstand this error

editor/:1 Access to XMLHttpRequest at ‘https://storage.googleapis.com/char-sheet-app-dff083b4/charsheets/marvelofficial/sheet.png?1690938584’ from origin ‘https://app.roll20.net’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.Understand this error
sheet.png:1

       Failed to load resource: net::ERR_FAILEDUnderstand this error

gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:831 Refused to execute inline script because it violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-eval’ ‘nonce-m82xhMe79xIPSWL1’ ‘nonce-8ZIkcVb8iYPQCEj9’ ‘nonce-gVpJnnFW8DGFvqXn’ https://cdn.roll20.net blob: https://www.datadoghq-browser-agent.com http://cdn.inspectlet.com https://.googlesyndication.com https://.doubleclick.net https://.thedemiplane.com https://.demiplane.com https://partner.googleadservices.com https://www.googletagservices.com https://ssl.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://apis.google.com http://ajax.googleapis.com https://d3clqjduf2gvxg.cloudfront.net https://cdn.firebase.com https://.firebaseio.com https://.tokbox.com https://.opentok.com http://static.opentok.com http://www.google-analytics.com http://cdn.crowdin.com https://crowdin.com http://stun.l.google.com .sentry-cdn.com https://www.googletagmanager.com https://.refiner.io https://.maze.co”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-JspLZ8B5eM1mVjrLPnBken0XvCRvKEuainBTs3jp7HA=’), or a nonce (‘nonce-…’) is required to enable inline execution.

(anonymous) @ gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:831Understand this error
gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:831 Refused to execute inline script because it violates the following Content Security Policy directive: “script-src ‘self’ ‘unsafe-eval’ ‘nonce-m82xhMe79xIPSWL1’ ‘nonce-8ZIkcVb8iYPQCEj9’ ‘nonce-gVpJnnFW8DGFvqXn’ https://cdn.roll20.net blob: https://www.datadoghq-browser-agent.com http://cdn.inspectlet.com https://.googlesyndication.com https://.doubleclick.net https://.thedemiplane.com https://.demiplane.com https://partner.googleadservices.com https://www.googletagservices.com https://ssl.google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://apis.google.com http://ajax.googleapis.com https://d3clqjduf2gvxg.cloudfront.net https://cdn.firebase.com https://.firebaseio.com https://.tokbox.com https://.opentok.com http://static.opentok.com http://www.google-analytics.com http://cdn.crowdin.com https://crowdin.com http://stun.l.google.com .sentry-cdn.com https://www.googletagmanager.com https://.refiner.io https://.maze.co”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-VussMEcsqEPalla4i7RvpHqvRE4+2WmSh4DL2kBzaD4=’), or a nonce (‘nonce-…’) is required to enable inline execution.

(anonymous) @ gtm.js?id=GTM-MKL9HM6&gtm_auth=RyNPjkDTh-LgK4oo5gJi6A&gtm_preview=env-1&gtm_cookies_win=x:831Understand this error
editor/:1 is deprecated. Please include Understand this warning
editor/:1 Access to XMLHttpRequest at ‘https://storage.googleapis.com/char-sheet-app-dff083b4/charsheets/marvelofficial/sheet.png?1690938584’ from origin ‘https://app.roll20.net’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.Understand this error
sheet.png:1

       Failed to load resource: net::ERR_FAILEDUnderstand this error

editor/:1 Access to XMLHttpRequest at ‘https://storage.googleapis.com/char-sheet-app-dff083b4/charsheets/marvelofficial/sheet.png?1690938584’ from origin ‘https://app.roll20.net’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.Understand this error
totallyNotAnalytics.bundle.ac454c36fd1bdbe697fd.js:3 Error fetching content: AxiosError: Network Error
ct. @ totallyNotAnalytics.bundle.ac454c36fd1bdbe697fd.js:3Understand this error
2totallyNotAnalytics.bundle.ac454c36fd1bdbe697fd.js:3 Error fetching content: TypeError: Cannot read properties of undefined (reading ‘protocol’)
ct. @ totallyNotAnalytics.bundle.ac454c36fd1bdbe697fd.js:3Understand this error
sheet.png:1

       Failed to load resource: net::ERR_FAILEDUnderstand this error

vtt.bundle.4368031415fbfb542701.js:38298 :arrow_right: Roll20 Beacon v1.7.7 (SDK: v0.0.31) :arrow_right:
sheet.js:185 :arrow_left: Roll20 Beacon SDK v0.0.7 :arrow_left:
sheet.js:975 Uncaught (in promise) HeadlessUnderstand this error
vtt.bundle.4368031415fbfb542701.js:38298 :arrow_right: Roll20 Beacon v1.7.7 (SDK: v0.0.31) :arrow_right:
vtt.bundle.4368031415fbfb542701.js:7139 Player -OJXIn2586jduUN6Ldom is offline…
vtt.bundle.4368031415fbfb542701.js:7139 Player -OPRfQ0nQW4CRLz-Qexs is offline…
vtt.bundle.4368031415fbfb542701.js:7139 Player -OPRfSAfWRZai2BPIKQd is offline…
vtt.bundle.4368031415fbfb542701.js:7139 Player -OPmMQ5EfiTMGIaJxIYJ is offline…
vtt.bundle.4368031415fbfb542701.js:7139 Player -OPmMXt-HqvgXQAv57wl is offline…
vtt.bundle.4368031415fbfb542701.js:7139 Player -OPnynboZaJGLTNarrxu is offline…
vtt.bundle.4368031415fbfb542701.js:5662 THREE.WebGLRenderer 69
vtt.bundle.4368031415fbfb542701.js:51778 Firebase Online
jquery.migrate.js:39 JQMIGRATE: $(html) HTML strings must start with ‘<’ character
migrateWarn @ jquery.migrate.js:39Understand this warning
jquery.migrate.js:41 console.trace
migrateWarn @ jquery.migrate.js:41
jQuery.fn.init @ jquery.migrate.js:199
jQuery @ jquery-1.9.1.js:62
addExportButton @ R20Exporter.js:1275
documentModified @ R20Exporter.js:1261
R20Exporter.js:1416 Note that you should not open a different campaign in Roll20 as it can interfere with the download of some resources.
warn @ R20Exporter.js:1416Understand this warning
R20Exporter.js:1416 DISCLAIMER: Please note that using this extension to export a module from the marketplace may infringe on the Marketplace Asset License and/or Roll20 EULA.
warn @ R20Exporter.js:1416Understand this warning
R20Exporter.js:1416 If you’ve found this extension useful, please consider supporting the author on Patreon. Thank you!
warn @ R20Exporter.js:1416Understand this warning
vtt.bundle.4368031415fbfb542701.js:57 Scheduled automatic refresh of OAuth token
6478.0e87606b9396c3da.js:1 DEMIPLANE → beaconLoggingEnabled false
5886-44143910270037e3.js:48 :arrow_left: Roll20 Beacon SDK v0.0.26 :arrow_left:
vtt.bundle.4368031415fbfb542701.js:38413 marked(): mangle parameter is enabled by default, but is deprecated since version 5.0.0, and will be removed in the future. To clear this warning, install marked-mangle - npm, or disable by setting {mangle: false}.
de @ vtt.bundle.4368031415fbfb542701.js:38413Understand this warning
vtt.bundle.4368031415fbfb542701.js:38413 marked(): headerIds and headerPrefix parameters enabled by default, but are deprecated since version 5.0.0, and will be removed in the future. To clear this warning, install @redwoodjs/core - npm, or disable by setting {headerIds: false}.
de @ vtt.bundle.4368031415fbfb542701.js:38413Understand this warning
vtt.bundle.4368031415fbfb542701.js:3691 [2025-05-15T06:08:14.404Z] @firebase/database: FIREBASE WARNING: set at /campaign-19190852-OaUqJN4YUirhTfUYsE_5zg/dynamic_fog/masks/page/-OPnIHRk9L6rKuxm6t3Q/manual/permanent/pageID failed: permission_denied
g @ vtt.bundle.4368031415fbfb542701.js:3691Understand this warning
vtt.bundle.4368031415fbfb542701.js:34657 Download the Apollo DevTools for a better development experience: https://chrome.google.com/webstore/detail/apollo-client-developer-t/jdkknkkbebbapilgoeccciglkfbmbnfm
vtt.bundle.4368031415fbfb542701.js:3691 [2025-05-15T06:08:16.254Z] @firebase/database: FIREBASE WARNING: update at /campaign-19190852-OaUqJN4YUirhTfUYsE_5zg/pages/-OPnIHRk9L6rKuxm6t3Q failed: permission_denied
g @ vtt.bundle.4368031415fbfb542701.js:3691Understand this warning
2

     Chrome is moving towards a new experience that allows users to choose to browse without third-party cookies.

Can I get a screenshot of what you mean by malformed rolls? There’s a couple issues I’m aware of that might be related to that and I’d like to make sure which one you’re talking about.

Here you go, Eve

image

Interesting, thank you. That’s the second time I’ve seen that. Is it all rolls on a specific character sheet? Also, the other report I’ve had for this it went away on it’s own during the next session, has this happened multiple times for you?

If you have any steps that can consistently reproduce this that would also help, the struggle right now is that we haven’t been able to replicate the issue.

Every time on my server and another’s. And the other player playing.

I set my Roll20 settings to:

  • Dark Mode
  • always pop-out the character sheet.
  • always automatically roll and use 3d dice.
  • use animations.

Hopefully this helps you to diagnose the problem.

I’m still struggling to replicate it but I’ll make sure it gets reported so that the tech folks can take a look at why it might be happening.

1 Like

If this is still happening for you can I get a link to the character sheet it’s happening with?