Many thanks for your help in pointing me in the right direction. I thought the problem lay with Xara not that the browser didn't like the insecure snapshots.