This option can be enabled under System > Server config and is named "Web folder protection".
Attach a file by drag & drop or click to upload