Ontariocolleges.ca

server: Varnish
retry-after: 0
cache-control: max-age=86400
location: https://www.ontariocolleges.ca/
accept-ranges: bytes
date: Fri, 13 Feb 2026 07:27:53 GMT
via: 1.1 varnish
x-served-by: cache-fra-etou8220057-FRA
x-cache: HIT
x-cache-hits: 0
x-timer: S1770967673.363629,VS0,VE0
strict-transport-security: max-age=31557600
content-length: 0

HTTP/2 301 
cache-control: private, no-store
location: /en
content-type: text/plain; charset=utf-8
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Fri, 13 Feb 2026 07:27:53 GMT
x-served-by: cache-yyz4528-YYZ, cache-fra-etou8220025-FRA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1770967673.392515,VS0,VE99
vary: Accept, Accept-Encoding
strict-transport-security: max-age=31557600
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37

HTTP/2 200 
content-security-policy: style-src 'nonce-9401194b0dacd5c967e31d0dacf65b44aaa80fbf44e70c22c578ef852354d723' 'self' https://*.hotjar.com;style-src-attr 'unsafe-inline';script-src 'nonce-9401194b0dacd5c967e31d0dacf65b44aaa80fbf44e70c22c578ef852354d723' 'strict-dynamic' ;connect-src 'self' https://cdn.builder.io https://cdn.builder.codes https://*.ocas.ca https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.algolia.net https://*.algolianet.com https://*.services.visualstudio.com https://api.stadiamaps.com https://tiles.stadiamaps.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://pagead2.googlesyndication.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://connect.facebook.net https://*.list-manage.com https://cdn.cookielaw.org https://*.onetrust.com https://*.clarity.ms https://c.bing.com https://authenticate.ocas.ca https://api.policies.ocas.ca https://programwebscraper.blob.core.windows.net;img-src 'self' data: blob: https://cdn.builder.io https://cdn.ocas.ca https://placehold.co/ https://*.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://*.hotjar.com https://cdn.cookielaw.org https://*.clarity.ms https://c.bing.com;frame-ancestors 'self' https://builder.io;frame-src 'self' https://www.youtube.com https://www.google.com https://cdn.builder.io https://www.googletagmanager.com https://td.doubleclick.net https://app.ca.five9.com;font-src 'self' data: blob: https://*.ocas.ca https://fonts.gstatic.com https://*.hotjar.com;object-src 'self' https://cdn.builder.io;default-src 'self';base-uri 'self';form-action 'self';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cache-control: no-cache
content-type: text/html;charset=UTF-8
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 36
date: Fri, 13 Feb 2026 07:27:53 GMT
x-served-by: cache-yyz4526-YYZ, cache-fra-etou8220025-FRA
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-timer: S1770967673.497214,VS0,VE99
vary: Accept-Encoding
strict-transport-security: max-age=31557600
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 64318