Allow https in a callback URL

There is a similar existing feature request you might want to contribute to: