Avoided listing the connection type (HTTP or HTTPS) on the src attribute of rendered iframes because browsers now do not enable the iframe unless its source connection type matches the parent page's connection type. (https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/)