diff --git a/src/metabase/middleware.clj b/src/metabase/middleware.clj
index c9209928bc3e0eb425bc4131bde2b166873c198e..a24fe83ccb0cc0de3cb946d2ad51ea56bb16391e 100644
--- a/src/metabase/middleware.clj
+++ b/src/metabase/middleware.clj
@@ -142,8 +142,8 @@
                                                       :script-src  ["'unsafe-inline'"
                                                                     "'unsafe-eval'"
                                                                     "'self'"
-                                                                    "www.google-analytics.com"
-                                                                    "*.googleapis.com"
+                                                                    "https://www.google-analytics.com" ; Safari requires the protocol
+                                                                    "https://*.googleapis.com"
                                                                     "*.gstatic.com"
                                                                     "js.intercomcdn.com"
                                                                     "*.intercom.io"
diff --git a/src/metabase/pulse.clj b/src/metabase/pulse.clj
index 0825c43b61e118c14ab0779f94be17adbcfad097..ae0b14e1b85e0520539a0a6eb92256398be83666 100644
--- a/src/metabase/pulse.clj
+++ b/src/metabase/pulse.clj
@@ -242,7 +242,7 @@
                                                :max-height       :10px
                                                :height           :10px
                                                :border-radius    :2px
-                                               :width            (str (float (* 100 (/ (bar-column row) max-value))) "%")})}
+                                               :width            (str (float (* 100 (/ (double (bar-column row)) max-value))) "%")})} ; cast to double to avoid "Non-terminating decimal expansion" errors
                           " "]])])
                    rows)]]))