-
Notifications
You must be signed in to change notification settings - Fork 4.5k
Description
In #66459, the temple types and areas data was added to the index for the REST API, ie /wp-json
.
As this data isn't needed for public access, I'd like to revert the change and continue to use the settings for WordPress 6.8. While the data is relatively safe by default, themes or plugins may use templates in such a way that adds potentially revealing information to a site. (Woo currently adds the mini cart too template types, relatively harmless, but as they move to the block editor more risky info may be added.)
I think it would be best to use the previous approach until Core-48885 is resolved and read-only access is added to the settings endpoint to allow for the data to be exposed to theme editors without the ability to manage options.
This change would move the following off the WordPress 6.8 milestone: