Problem solved.
It was an interaction between NoScript and Google. Not all google services support promotion to HTTPS. There doesn’t seem to be a good regex to distinguish between the secure and non-secure services.
Work around was to allow insecure connections for all *.google.com domains. This can be selectively turned off when using Geo Mashup and re-enabled afterwards.
Hopefully, Google will allow all of their URLs to be accessed via TLS in the future.