# Application files and transaction data must never be served directly.
<FilesMatch "^(\.|composer\.(json|lock)$)">
    Require all denied
</FilesMatch>
RewriteEngine On
RewriteRule ^(?:storage|logs|src|vendor|tests|bin)(?:/|$) - [F,L]
