ATS exceptions can be set here. To learn more about this, view this article. Essentially, if you are using http instead of https, you need to list the domains here. 

You can also whitelist urls.