Script src breaks SSL/HTTPS pages for mixed content