# We try to push our code to productions servers without hidden files and directors,
# like our revision system directors, but that doesn’t always happen.
# This snippet prevents those files from being accessible:

<IfModule mod_rewrite.c>
    RewriteCond %{SCRIPT_FILENAME} -d [OR]
    RewriteCond %{SCRIPT_FILENAME} -f
    RewriteRule "(^|/)\." - [F]
</IfModule>

http://davidwalsh.name/html5-boilerplate-htaccess