# Uploads are re-encoded images with random names. Refuse to serve anything script-like from here.
<FilesMatch "\.(?i:php\d?|phtml|phar|pl|py|cgi|sh)$">
    Require all denied
</FilesMatch>
