Rewrite whitelisted iframes to use protocol agnostic URLs