<IfModule mod_mime.c>
        # Security configuration
        RemoveType .html .htm
        <FilesMatch ".+\.html?$">
                AddType text/html .html .htm
        </FilesMatch>

        RemoveType .svg .svgz
        <FilesMatch ".+\.svgz?$">
                AddType image/svg+xml .svg .svgz
        </FilesMatch>

        <FilesMatch ".+\.php\.wrong"> 
            RemoveHandler .php ForceType text/plain
            AddType text/plain      .wrong
        </FilesMatch>

        <FilesMatch ".+\.php\.txt"> 
            RemoveHandler .php ForceType text/plain
            AddType text/plain      .txt
        </FilesMatch>
  
  ...

<IfModule mod_headers.c>
  Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none';"
</IfModule>