Use protocol-agnostic URLs, enable JSON load via script injection or XDomainRequest on embed page