Hi,
Here is the solution to the problem I have.
order deny,allow
deny from all
<files ~ ".(xml|css|jpe?g|png|gif|js|ico|ttf|otf|eot|woff)$">
allow from all
</files>
To confirm for others, this .htaccess file is only used in your /wp-content to limit which files are accessible to others. From others on the internet, this increases the security of your wordpress install.