RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Header unset ETag
   FileETag None
   
Header set Content-Security-Policy "script-src 'unsafe-inline' 'unsafe-eval' 'self' https://code-ya.jivosite.com https://www.statcounter.com  https://maps.googleapis.com   https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://code.jquery.com  https://www.google-analytics.com   https://static.hotjar.com  https://connect.facebook.net  https://telemetry.jivosite.com  https://cdn-cis.jivosite.com  https://telemetry.jivosite.com https://cdn-fr.jivosite.com  https://cdn.syndication.twimg.com https://platform.twitter.com https://img1.wsimg.com  https://code.jivosite.com  code-eu1.jivosite.com https://script.hotjar.com ; object-src 'self'"
Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
Header set X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
Header set X-XSS-Protection "1; mode=block"
Header always set Referrer-Policy "same-origin"
Header always set Feature-Policy "microphone 'none'; payment 'none'; sync-xhr 'self' https://bestcarpetsny.com"