diff --git a/.circleci/config.yml b/.circleci/config.yml index fe0d237748..82a9a2c2f3 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -349,16 +349,14 @@ workflows: filters: branches: only: - - develop - free - - justin-fixes # This is alternate dev env for parallel testing - "build-test": context : org-global filters: branches: - only: - - tco23 + only: + - free # This is alternate dev env for parallel testing - "build-qa": context : org-global diff --git a/src/server/index.js b/src/server/index.js index 70590aa8b8..57a60b6d97 100644 --- a/src/server/index.js +++ b/src/server/index.js @@ -138,10 +138,11 @@ async function onExpressJsSetup(server) { res.header('Permissions-Policy', 'geolocation=(), microphone=(), camera=()'); if (req.url.startsWith('/__community__/veterans') || req.hostname === 'veterans.topcoder.com' || req.url.startsWith('/__community__/tco') || tcoPattern.test(req.hostname)) { + res.header('Cache-Control', 'no-cache'); res.header( 'Content-Security-Policy', "default-src 'self';" - + " script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval'" + + " script-src 'report-sample' 'self'" + ` ${config.CDN.PUBLIC}` + ' http://www.google-analytics.com' + ' https://www.google-analytics.com'