diff --git a/web.config.sample b/web.config.sample
index 77f00d986b1..2c4ac4b7955 100644
--- a/web.config.sample
+++ b/web.config.sample
@@ -31,6 +31,12 @@
     
     <security>
       <requestFiltering>
+        <hiddenSegments>
+          <add segment="app"/>
+          <add segment="src"/>
+          <add segment="vendor"/>
+          <add segment="tests"/>
+        </hiddenSegments>
         <denyUrlSequences>
           <add sequence="composer" />
           <add sequence="autoload" />