Acadiau.ca - Ace.acadiau.ca

Date: Mon, 29 Dec 2025 12:41:42 GMT
Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k
Cache-Control: no-cache, private
x-powered-by: PHP/8.1.33
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Permissions-Policy: fullscreen=(self 'https://player.vimeo.com' 'https://www.youtube.com')
Contao-Cache: miss
Content-Security-Policy: frame-ancestors 'self';
Strict-Transport-Security: max-age=31536000; includeSubDomains
Location: https://ace.acadiau.ca/home.html
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Content-Language: en
Content-Security-Policy-Report-Only: default-src 'self' *.acadiau.ca; img-src 'self' *.acadiau.ca *.index.digital *.sitescout.com *.gstatic.com *.bc0a.com *.twimg.com *.facebook.com *.twitter.com *.google.ca *.google.com www.google-analytics.com wl-pixel.index.digital pixel.sitescout.com s3.amazonaws.com *.b0e8.com; font-src 'self' *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com; style-src 'self' *.bootstrapcdn.com *.fontawesome.com *.twimg.com *.twitter.com *.googleapis.com widget.alongside.com 'unsafe-inline'; script-src 'self' *.acadiau.ca *.google.com *.googleapis.com acuityplatform.com *.jquery.com *.bootstrapcdn.com *.facebook.net *.google-analytics.com *.technolutions.net *.twitter.com *.twimg.com widget.alongside.com *.instagram.com *.cloudflare.com e.issuu.com *.pixel.ad *.hotjar.com *.bc0a.com *.b0e8.com theta360.com 'unsafe-inline'; connect-src 'self' *.hotjar.com *.doubleclick.net www.google-analytics.com *.doubleclick.com *.sitescout.com *.doubleclick.n; frame-src 'self' *.hotjar.com *.youtube.com *.vimeo.com *.twitter.com *.issuu.com *.facebook.com *.instagram.com *.sitescout.com theta360.com; frame-ancestors 'self';
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

HTTP/1.1 200 OK
Date: Mon, 29 Dec 2025 12:41:43 GMT
Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k
Cache-Control: must-revalidate, no-cache, no-store, private
x-powered-by: PHP/8.1.33
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Permissions-Policy: fullscreen=(self 'https://player.vimeo.com' 'https://www.youtube.com')
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Contao-Cache: miss
Age: 0
Content-Security-Policy: frame-ancestors 'self';
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
Content-Encoding: gzip
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Content-Language: en
Content-Security-Policy-Report-Only: default-src 'self' *.acadiau.ca; img-src 'self' *.acadiau.ca *.index.digital *.sitescout.com *.gstatic.com *.bc0a.com *.twimg.com *.facebook.com *.twitter.com *.google.ca *.google.com www.google-analytics.com wl-pixel.index.digital pixel.sitescout.com s3.amazonaws.com *.b0e8.com; font-src 'self' *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com; style-src 'self' *.bootstrapcdn.com *.fontawesome.com *.twimg.com *.twitter.com *.googleapis.com widget.alongside.com 'unsafe-inline'; script-src 'self' *.acadiau.ca *.google.com *.googleapis.com acuityplatform.com *.jquery.com *.bootstrapcdn.com *.facebook.net *.google-analytics.com *.technolutions.net *.twitter.com *.twimg.com widget.alongside.com *.instagram.com *.cloudflare.com e.issuu.com *.pixel.ad *.hotjar.com *.bc0a.com *.b0e8.com theta360.com 'unsafe-inline'; connect-src 'self' *.hotjar.com *.doubleclick.net www.google-analytics.com *.doubleclick.com *.sitescout.com *.doubleclick.n; frame-src 'self' *.hotjar.com *.youtube.com *.vimeo.com *.twitter.com *.issuu.com *.facebook.com *.instagram.com *.sitescout.com theta360.com; frame-ancestors 'self';
Content-Length: 6074
Content-Type: text/html; charset=UTF-8