public/.htaccess
# anti directory listing
# normal
# Options -Indexes
# sakura internet
# DirectoryIndex index.html index.php .ht
<ifModule mod_headers.c>
# anti Clickjacking
Header always set X-Frame-Options DENY
# Do not auto recognize Content-Type
Header always set X-Content-Type-Options nosniff
# Browser XSS Protection
Header always set X-XSS-Protection "1; mode=block"
# Cache-Control
Header always set Pragma no-cache
Header always set Cache-Control no-cache
</ifModule>
# web font
AddType application/font-woff .woff
AddType application/font-woff .woff2
AddType application/x-font-ttf .ttf
AddType application/x-font-otf .otf
AddType image/svg+xml .svg
AddType application/vnd.ms-fontobject .eot
# redirect
RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php [QSA,L]