I'm sorry that I don't know more to tell you why it's happening. For whatever reason, however, your cart is serving that line of source in your secure pages, and your visitors browsers in turn are grabbing all of your relative url content via http.

--Joe