newsupernova/vendor/magento/magento2-base/pub/media/theme_customization/.htaccess

Options -Indexes
<Files ~ "\.xml$">
    <IfVersion < 2.4>
        order allow,deny
        deny from all
    </IfVersion>
    <IfVersion >= 2.4>
        Require all denied
    </IfVersion>
</Files>