Make sure YAML is not accessible.
Add project .htaccess