* sane defaults

public/.htaccess

@@ -15,3 +15,10 @@ RewriteRule ^.*$ - [NC,L]
 RewriteCond %{REQUEST_URI}::$1 ^(/.+)(.+)::\2$
 RewriteRule ^(.*) - [E=BASE:%1]
 RewriteRule ^(.*)$ %{ENV:BASE}index.php [NC,L]
+
+<Limit GET POST PUT DELETE HEAD OPTIONS>
+    Require all granted
+</Limit>
+<LimitExcept GET POST PUT DELETE HEAD OPTIONS>
+    Require all denied
+</LimitExcept>