bsilla

Doesn't `play.filters.headers.contentSecurityPolicy = null` mean that you accept to load everything from everywhere ? Something like `play.filters.headers.contentSecurityPolicy="default-src 'self'; script-src 'self' 'unsafe-inline'"` is less permissive and should work. See [this interesting...

Still happens in sbt 1.3.8

any chance of seeing this happen soon ?

I ended up using [elasticsearch-cluster-runner](https://github.com/codelibs/elasticsearch-cluster-runner). Works great for my needs, and migration wasn't painful.