I checked out this link here on SO: Dealing with HTTP content in HTTPS pages
I tried this regarding open protocols from here: http://benpowell.org/https-and-http-the
Stumbled upon this thread while trying to get my application hosted on heroku while using the Open Weather Map API.
Put this in front of the url:
https://cors-anywhere.herokuapp.com/
so that the url becomes
https://cors-anywhere.herokuapp.com/http://api.openweathermap.org/data/2.5/forecast? appid=${API_KEY}
Check your application again and note that the openweather url is http again (the way it was originally)! This solution worked for me, although the CORS solution may not last forever.