Options -Indexes

# Uploaded files are data, never executable application code.
<FilesMatch "\.(?:php[0-9]?|phtml|phar|cgi|pl|py|sh|shtml|fcgi)$">
    Require all denied
</FilesMatch>

<IfModule mod_mime.c>
    RemoveHandler .php .php3 .php4 .php5 .php7 .php8 .phtml .phar
    RemoveType .php .php3 .php4 .php5 .php7 .php8 .phtml .phar
</IfModule>

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set Content-Security-Policy "default-src 'none'; img-src 'self' data:; style-src 'none'; sandbox"
</IfModule>
