public function secureIframeSrc($tag, $attribute, &$value) { if ($tag === 'iframe' && $attribute === 'src' && strpos($value, 'http://') === 0) { $value = substr_replace($value, 's', 4, 0); } return true; }