szepeviktor / waf4wordpress

WAF for WordPress 🔥 with 60+ security checks and weekly updates
https://github.com/szepeviktor/wordpress-website-lifecycle
MIT License
123 stars 25 forks source link

Disable REST API without disabling oEmbed discovery #4

Closed szepeviktor closed 6 years ago

szepeviktor commented 6 years ago

Instead of remove_action( 'wp_head', 'wp_oembed_add_discovery_links' ); and hooking rest_authentication_errors disable REST API later based on $request->get_route() in rest_pre_dispatch

szepeviktor commented 6 years ago

Implemented.