make sure we only process http[s] links in external resources