search

cagov / ca-design-system-gutenberg-blocks

DEPRECATED: CA Design System Gutenberg blocks for WordPress.
MIT License
4 stars 5 forks source link

Lock down /users #65

Closed chachasikes closed 2 years ago

chachasikes commented 2 years ago

The users endpoint reveals user data by default.

This was a recommended plugin to try to lock down the users page. https://wordpress.org/plugins/disable-json-api/ plugin

This change will impact wordpress to github (it should cause an error based on the current source code), and so we will need a fix for this to happen first: https://github.com/cagov/wordpress-to-github/issues/111

chachasikes commented 2 years ago

(Note: emails are not included by default)

carterm commented 2 years ago

Highly speculative. No evidence this is an issue.