Protect sites by default from wp-json "snooping"

[discobot]

It should not be possible for non-logged-in people to view the output of domain.com/wp-json

---

Read-only archive: Issues · ClassicPress/ClassicPress · GitHub

Author: Pieter Bos

Vote count: 17

Status: duplicate

~ posted by Pieter Bos

Tags:

• difficulty-easy
• request-modify-feature

---

Comments

it is the same of Issues · ClassicPress/ClassicPress · GitHub?

~ posted by Daniele Scasciafratte

Not sure. If the result of that feature is that domain.com/wp-json can no longer be visited, then yes and the up-votes can be accumulated

~ posted by Pieter Bos

[viktor]

Duplicate.