Order deny,allow
DENY from all
<Files ~ ".(xml|css|jpe?g|png|gif|js|php|pdf)$">
Allow from all
</Files>