# Never execute uploaded files as code.
<FilesMatch "\.(php|phtml|phar|html|htm|js|cgi|pl|py|sh)$">
    Require all denied
</FilesMatch>
