If I understand correctly, all the urls on a secure page have to be absolute, but not necessarily on the non-secure pages.

So, is there a bit of code that will force absolute URLs on the shopping cart pages?

So I added this bit of code to the template and it seems to work:

<script type="text/javascript">

            $(function(){

                    //Use jQuerys .each() method to iterate over each link

                   $('a').not('[href^="http"],[href^="https"],[href^="mailto:"],[href^=" #"]').each(function() {

                    //Use .attr() to modify the href, when you provide a callback function

                    //the arguments passed are the attribute index and its value

                  $(this).attr('href', function(index, value) {

                    //This fix solves the problem when you aren't at the root level of a site

                    // e.g. if you are at site.com/page1/ and the link href is "do/something"

                    // we need to make sure the absolute url becomes newsite.com/page1/do/something

                    // if we just prepended the new domain we would actually get newsite.comdo/something

                    // which obviously wouldn't work

                if (value.substr(0,1) !== "/") {

                    value = window.location.pathname + value;

                }

                    //When you return from the callback function for .attr() it will set the attribute

                    //to this new value.

                    //We don't use a trailing slash on mynewurl.com because it will already exist if

                    //the href starts with a / or it will be part of window.location.pathname

                return "http://myshop.businesscatalyst.com" + value;

                    });

                });

            });

        </script>