allow http and https videos