Options -MultiViews -Indexes RewriteEngine On # Keep the Laravel application outside the web-facing path. RewriteRule ^public/ - [L] RewriteRule ^(.*)$ public/$1 [L] Header always set X-Content-Type-Options "nosniff" Header always set X-Frame-Options "SAMEORIGIN"