Possible to allow HTTP requests from HTTPS website?

Question

I have installed a (non wildcard) SSL certificate so my website can use HTTPS. When I try to request resources from HTTP urls I get error-message like:

<

Answer 1

stylesheet ... static resources that I don't regard as critical over http.

CSS can include script and script can alter the page, so it is considered critical.

..."allow http requests from https with iis" ...

The decision to deny mixed content is done within the browser. There is no setting which will allow the browser to include mixed content. The behavior on what is considered mixed content differs between browsers and versions, look here for more information from a year ago.

... is it solvable the same way CORS is?

The security model of CORS cares about same origin policy and a server may decide that a specific other side might do a CORS request. But in this case it is the question if the content might be modified in transit by anybody (i.e. man-in-the-middle attack).