I went for the hard code option for now – I changed it to the https up to /mappress/ and ommitted the icons/image name from the url and seemed to work.
yes it looks like it is the custom icon that is being loaded that is insecure. Are you able to confirm where I will update the code to https for the custom icon?