Restrict `redirect-url` to only load over HTTPS

[ShivanKaul]

Given that we're loading arbitrary resources over the network, even if the filter lists are controlled by us, we should only load over HTTPS to prevent MITM attacks.