Restricting uri protocol to http/https

@cantino, does this look okay?