location and file extension regex

[Musta Fa]

im trying to create some regex just to match before second slash and only.
and allow all subfolders:

location ~ ^/([^/])+\.(tpl|xml)$ { return 404; }

these files are located in root folder, and i dont want them to be
downloaded,
but other files in subfolder are downloadable.

not sure why it not working?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20161203/19de1b38/attachment.html>