@souenzzo Ok, I asked because saw that ring-core is a dependency of pedestal. Async aside, what do you like more about pedestal? interceptors?

@mike1452 The problem is the default CSP policy is too strict.

https://github.com/pedestal/pedestal/issues/499

this should solve your problem 🙂

@nxqd thanks. I will try the solution ::http/secure-headers {:content-security-policy-settings {:object-src "none"}

any reason to pedestal deref handler functions? I'm using #{["/foo" [interceptor #'my-ns/handler]]}