Don't rely on browser to auto-add protocol to //hostname/path URLs.

It works, but apparently XHR protection fails sometimes in Chrome because
the allowed origin header is compared against the wrong string, or
something.
diff --git a/render.js b/render.js
index c9bc33b..3c4f537 100644
--- a/render.js
+++ b/render.js
@@ -1784,6 +1784,7 @@
       var url = args.get('url');
       console.debug('original data url:', url);
       if (!url) throw new Error('Missing url= in query parameter');
+      if (url.indexOf('//') == 0) url = window.location.protocol + url;
       url = extendDataUrl(url);
       showstatus('Loading <a href="' + encodeURI(url) + '">data</a>...');