source url - use https and avoid quoting