HTTP/2 200 content-type: text/html; charset=UTF-8 server: Microsoft-IIS/10.0 x-powered-by: PHP/8.3.10 strict-transport-security: max-age=0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff content-security-policy: default-src 'self'; script-src blob: s3.amazonaws.com *.cassiecloud.com www.carl-abrc.ca *.concordia.ca ajax.googleapis.com 'unsafe-inline' 'unsafe-eval' netdna.bootstrapcdn.com fonts.googleapis.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com cdn.jsdelivr.net library.concordia.ca *.library.concordia.ca *.tableau.com *.google-analytics.com cdnjs.cloudflare.com api3-ca.libcal.com lgapi-ca.libapps.com code.jquery.com *.google.com Concordiauniversity.libanswers.com *.gstatic.com chat-ca.libanswers.com www.googletagmanager.com;style-src 'self' 'unsafe-inline' p.typekit.net fonts.adobe.com use.typekit.net *.cassiecloud.com *.concordia.ca *.google.com code.jquery.com netdna.bootstrapcdn.com fonts.googleapis.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com cdn.jsdelivr.net; connect-src *.cassiecloud.com *.concordia.ca *.google-analytics.com pegasus.concordia.ca chat-ca.libanswers.com library.concordia.ca *.library.concordia.ca; frame-src concordia-ca.libwizard.com www.carl-abrc.ca *.sharepoint.com www.google.com drive.google.com fcms.concordia.ca concordia.yuja.com *.tableau.com *.office.com player.vimeo.com *.youtube.com youtube.com concordiauniversity.libanswers.com library.concordia.ca *.library.concordia.ca *.youtube-nocookie.com pegasus.concordia.ca; media-src 'self' data: siskel.lib.ncsu.edu *.concordia.ca library.concordia.ca *.library.concordia.ca; img-src * data:; font-src 'self' data: use.typekit.net *.sharepoint.com *.concordia.ca netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com library.concordia.ca *.library.concordia.ca date: Tue, 20 Jan 2026 06:59:28 GMT content-length: 100484