# Allow access to uploaded files
<Files "*">
    Order allow,deny
    Allow from all
</Files>

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options nosniff
    Header set X-Frame-Options DENY
    Header set X-XSS-Protection "1; mode=block"
</IfModule>
