removed unsafe content when using https