Updating default protocol used by safe_iframe_regexp

Embed codes are using protocol agnostic URLs these days, and it isn't a huge security concern to make our code use that.