gist embedding: replace purplegene with sandboxed iframe with data: URI which will work on HTTPS