Forgot to mention... it looks like it's only happening with https. Since at some point in checkout, it's gotta go to https, I have to get it work, since anything with href, or src gets affected (i.e. links, css, and images).

...i'll post the config in a minute.