RedirectMatch 404 /\.git Header append X-FRAME-OPTIONS "SAMEORIGIN" Header append X-Content-Type-Options "nosniff" <IfModule mod_headers.c> Header set X-XSS-Protection "1; mode=block" # Header always append X-Frame-Options SAMEORIGIN Header always set Strict-Transport-Security "max-age=604800; includeSubDomains" Header set X-Content-Type-Options nosniff </IfModule>