deny from all

<Files ~ "(\.xml|\.png)$">
allow from all
</Files>
