<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        Options -MultiViews
    </IfModule>

    RewriteEngine On

    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)/$ /$1 [L,R=301]

    # Handle Front Controller...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]

</IfModule>

<IfModule mod_headers.c>
    # Header set Access-Control-Allow-Origin "*"
    # Agregado (para prevenir que el contenido pueda ser embedido dentro de un frame)
    Header set X-Frame-Options: "DENY"
    # Agregar el HSTS (para achiquar el riesgo de ataques MITM )
    Header always set Strict-Transport-Security "max-age=15552000;includeSubDomains"
    # Cabecera que indica al navegador que bloque las paginas que puede contener X-XSS-ATTACK (SAFARI SUPPORT ONLY)
    Header set X-XSS-Protection "1; mode=block"
    # Cabecera que indica si se va mandar referrer a pedidos de recursos
    Header always set Referrer-Policy "no-referrer,strict-origin-when-cross-origin"
    #
    #Header always set Content-Security-Policy "default-src 'self'; img-src 'self' https:; font-src 'self' https://fonts.gstatic.com; script-src 'self' https:; style-src 'unsafe-inline' 'self'; object-src 'none'; media-src 'self'"
</IfModule>

