I’m incredibly stoked for the potential of vase + ions. I’ve tried (multiple times if I’m being honest) to get vase + datomic cloud to work before, but to no avail. Is there any discussion happening about combining vase + ions?

@joe.lane nothing concrete but I’m sure it will happen. I’ll keep folks posted here once I have more information.

Does anyone know how to turn off the Content-Security-Policy header?

Interceptors I took from an example are io.pedestal.http.body-params/body-params and io.pedestal.http/html-body.

But my response header still includes Content-Security-Policy: object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;.

@twashing you can pass ::http/secure-headers {:content-security-policy-settings {:object-src "'none'"}} or similar in the service map

Hmm, that doesn’t quite work. But I think it’s close… Now I can’t find any reference in the docs. http://pedestal.io/reference/index#_securing_a_pedestal_application

Did you just dig through the code?

@martinklepsch Thanks btw :)

some of it is documented here: http://pedestal.io/reference/service-map

Some other I dug out of this mailing list thread: https://groups.google.com/forum/#!topic/pedestal-users/caRnQyUOHWA

Ah ha

@martinklepsch Did the trick. Thanks mate!

np 🙂