When hosted on a secure server, jQuery CORS policy won't allow access to insecure (i.e. HTTP rather than HTTPS) resources.

[jonoyuan]

Edit: the issue is not with insecure resources, but with a missing permissions on the resource site.

For example, if you try to run an AJAX query on an insecure resource, you get the error below. Is there a workaround for this?

Access to XMLHttpRequest at 'resource' from origin 'host' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

[moradology]

There are a couple of workarounds.

1. Copy the resource to a better location or get the permissions changed (CORS is a server-side concern)
2. Use a server to proxy the resource - and thereby circumvent CORS. Here's a free proxy that you could use: https://corsproxy.github.io/

[jonoyuan]

Thanks! That particular proxy is often down but I was able to find another one that works: https://cors-anywhere.herokuapp.com/