Acadiau.ca - Connect.acadiau.ca

alt-svc: h3=":443"; ma=2592000
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-security-policy: frame-ancestors 'self'
date: Fri, 17 Oct 2025 12:15:23 GMT
expires: -1
location: https://www2.acadiau.ca/apply.html
pragma: no-cache
referrer-policy: origin-when-cross-origin
set-cookie: _node=7fca9be621ee75712f80244796f36348051476fa681b86328eb84a7c9dc224d3; Path=/; Secure; SameSite=None
set-cookie: _hash=4b70b4bf-0c43-43f1-acba-405c632a0f0f; path=/; secure; HttpOnly; SameSite=None
set-cookie: _hash=4b70b4bf-0c43-43f1-acba-405c632a0f0f; expires=Thu, 17-Oct-2030 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: _hashV=202510/1; path=/; secure; HttpOnly; SameSite=None
set-cookie: _hashV=202510/1; expires=Thu, 17-Oct-2030 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
strict-transport-security: max-age=31536000
content-length: 0

HTTP/1.1 200 OK
Date: Fri, 17 Oct 2025 12:15:25 GMT
Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k
Cache-Control: must-revalidate, no-cache, no-store, private
x-powered-by: PHP/8.1.33
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Permissions-Policy: fullscreen=(self 'https://player.vimeo.com' 'https://www.youtube.com')
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Contao-Cache: miss
Age: 0
Content-Security-Policy: frame-ancestors 'self';
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
Content-Encoding: gzip
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Content-Language: en
Content-Security-Policy-Report-Only: default-src 'self' *.acadiau.ca; img-src 'self' *.acadiau.ca *.index.digital *.sitescout.com *.gstatic.com *.bc0a.com *.fontawesome.com *.picsum.photos picsum.photos *.twimg.com *.facebook.com *.twitter.com *.google.ca *.google.com www.google-analytics.com wl-pixel.index.digital pixel.sitescout.com s3.amazonaws.com *.b0e8.com *.siteimproveanalytics.io; font-src 'self' *.fontawesome.com *.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net; style-src 'self' *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.fontawesome.com *.twimg.com *.twitter.com *.googleapis.com widget.alongside.com 'unsafe-inline'; script-src 'self' *.acadiau.ca *.google.com *.googleapis.com *.fontawesome.com acuityplatform.com *.jquery.com *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.facebook.net *.google-analytics.com *.technolutions.net *.twitter.com *.twimg.com widget.alongside.com *.instagram.com *.cloudflare.com e.issuu.com *.pixel.ad *.hotjar.com *.bc0a.com *.b0e8.com theta360.com *.tiktok.com *.googletagmanager.com siteimproveanalytics.com 'unsafe-inline'; connect-src 'self' *.hotjar.com *.doubleclick.net www.google-analytics.com *.doubleclick.com *.sitescout.com *.doubleclick.n ka-p.fontawesome.com; frame-src 'self' *.livestream.com *.hotjar.com *.youtube.com *.vimeo.com *.twitter.com *.issuu.com *.facebook.com *.instagram.com *.sitescout.com theta360.com; frame-ancestors 'self';
Cache-Control: max-age=1, private, must-revalidate
Content-Length: 25887
Content-Type: text/html; charset=UTF-8