[test/browser-update] use HTTPS for their JavaScript