WordPress Insecure Content

Here is more info on the code you are referring to:

https://codex.wordpress.org/Function_Reference/home_url

“https” if is_ssl() and “http” otherwise. If the $scheme argument is “http” or “https” the is_ssl() check is overridden.