DirectoryIndex index.xhtml
AddType application/xhtml+xml;charset=UTF-8 .xhtml
AddType font/otf;outlines=CFF .otf
<FilesMatch "^\p{Lu}+$">
  ForceType text/plain
</FilesMatch>
AddOutputFilterByType DEFLATE application/xhtml+xml text/css font/otf \
 text/plain text/x-csrc application/postscript
Header set Content-Security-Policy "object-src 'none';"