by replacing with protocol-agnostic URLs. This fixes the mixed-content warning for secure instances of discourse, at least for Youtube