diff --git a/mongoose.c b/mongoose.c
index ef3e98b178d6495133f74efcbea11514aaacdecd..fc755fdc11fd27f347a6a42a8fe6a8d304bd2e7b 100644
--- a/mongoose.c
+++ b/mongoose.c
@@ -4266,6 +4266,8 @@ static void open_local_endpoint(struct connection *conn, int skip_user) {
     close_local_endpoint(conn);
 #endif
 #ifndef MONGOOSE_NO_DAV
+  } else if (must_hide_file(conn, path)) {
+    send_http_error(conn, 404, NULL);
   } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
     handle_propfind(conn, path, &st, exists);
   } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) {