RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

# Deny direct access to storage from web root if ever misconfigured
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
</IfModule>
