# The application folder must never be reachable from a browser.
# (It normally sits outside the web root, but this protects it either way.)
Require all denied
