Options -Indexes
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.php [QSA,L]
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options "nosniff"
 Header always set Referrer-Policy "strict-origin-when-cross-origin"
 Header always set X-Frame-Options "DENY"
 Header always set Content-Security-Policy "frame-ancestors 'none'"
 Header always set Cache-Control "no-store" env=REDIRECT_STATUS
</IfModule>
<FilesMatch "^(private-path|private-path\.example)\.php$">
 Require all denied
</FilesMatch>
