Options -Indexes
RewriteCond %{HTTPS} off
RewriteCond %{HTTP:X-Forwarded-SSL} !on
RewriteCond %{HTTP_HOST} ^khnlcustomer\.com$ [OR]
RewriteCond %{HTTP_HOST} ^www\.khnlcustomer\.com$
RewriteRule ^/?$ "https\:\/\/khnlcustomer\.com\/" [R=301,L]

<IfModule mod_headers.c>
    Header always set Server "SecureApp"
</IfModule>
<IfModule mod_headers.c>
    Header always set Server "SecureApp"
</IfModule>
 RewriteEngine On
    RewriteCond %{REQUEST_METHOD} ^(OPTIONS|TRACE|HEAD|PUT|DELETE|PATCH) [NC]
    RewriteRule .* - [F]
Options -Indexes

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php/$1 [L] 
</IfModule>

<IfModule mime_module>
  AddHandler application/x-httpd-ea-php74 .php .php7 .phtml
  Header set X-XSS-Protection "1; mode=block"
  Header set X-Frame-Options "SAMEORIGIN"
  Header set X-Frame-Options "DENY"
  Header set X-Content-Type-Options "nosniff"
  Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"
  Header set Referrer-Policy "same-origin"
  Header set Clear-Site-Data: "*"
 # Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"
 
#Header set Content-Security-Policy "default-src 'self'; script-src 'self'; object-src 'none'; style-src 'self' ; img-src 'self' data:;"
  
</IfModule>


<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  <FilesMatch "\.(php|html)$">
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-XSS-Protection "1; mode=block"
    Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
    Header set Content-Security-Policy "img-src 'self'"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
    Header set Cross-Origin-Resource-Policy "same-origin"
    Header set Cross-Origin-Embedder-Policy "require-corp"
    Header set Cross-Origin-Opener-Policy "same-origin"
    Header set Permissions-Policy "camera=(), geolocation=(), microphone=()"
  </FilesMatch>
</IfModule>

ErrorDocument 400 /error/400.html
ErrorDocument 401 /errors/401.html
ErrorDocument 403 /errors/403.html
ErrorDocument 404 /error/four_o_four
ErrorDocument 500 /errors/500.html
 <IfModule mod_headers.c>
        Header set Access-Control-Allow-Origin *
        Header set Access-Control-Allow-Credentials true
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php82” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php82 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit