Don't allow mixed content for picture/srcset. Fixes #229