Updating default protocol used by safe_iframe_regexp

Embed codes are using protocol agnostic URLs these days, and it isn't a
huge security concern to make our code use that.
Merge pull request #1245 from ditorelo/protocol-iframe

Updating default protocol used by safe_iframe_regexp