AllowOverride All Options -Indexes Require all granted Require all denied Require all denied Header always set X-Frame-Options "SAMEORIGIN" Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "strict-origin-when-cross-origin" ServerName localhost