Best practices say to replace src="http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js" with just src="//ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js". This will prevent any JS errors (which would crash the wizard) if someone tried to access the URL with an https protocol.
That particular practice breaks my localhost, making this a PITA to work on. Instead swapped for httpS, which is accepted practice as well. When this moves off testing, we can remove the https altogether.
Best practices say to replace
src="http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"
with justsrc="//ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"
. This will prevent any JS errors (which would crash the wizard) if someone tried to access the URL with an https protocol.