Merge pull request #387 from Z-Wave-Me/master

Disallow WebDAV MKCOL/PUT/DELETE requests to protected files

mongoose.c

@@ -4266,6 +4266,8 @@ static void open_local_endpoint(struct connection *conn, int skip_user) {
     close_local_endpoint(conn);
 #endif
 #ifndef MONGOOSE_NO_DAV
+  } else if (must_hide_file(conn, path)) {
+    send_http_error(conn, 404, NULL);
   } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
     handle_propfind(conn, path, &st, exists);
   } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) {