If the site hosting the web page enforces a secure HTTPS , some browsers (to check for Chrome) will require that all network resources use HTTPS .
Basically, if your site forces HTTPS , try setting src="https://yahoo.com"
This will not solve the OP answer directly due to the fact that this is a limitation of Yahoo itself, but other people viewing this page may run into this problem as a result of this (I was).
source share