`check -l` warn about mixed-content security (HTTP on HTTPS)