inline-videos: switch to protocol-relative iframe URI to avoid mixed content issues