问题
I have a case where I need to perform an AJAX request from an HTTPS page to another one (on a different domain) that is not secure. We've already implemented CORS policy and it was working fine before using HTTPS on our website. Is there any way to make this work?
回答1:
According to W3, it's not possible through a COR policy due to "certificate errors" http://www.w3.org/TR/access-control/#user-agent-security
来源：https://stackoverflow.com/questions/14703549/ajax-request-from-https-page-to-http-url