[wp-trac] [WordPress Trac] #36055: Filter xmlrpc_enabled only partly works

[WordPress Trac]

#36055: Filter xmlrpc_enabled only partly works
-------------------------------+-----------------------
 Reporter:  markoheijnen       |       Owner:  dd32
     Type:  defect (bug)       |      Status:  assigned
 Priority:  normal             |   Milestone:  4.5
Component:  XML-RPC            |     Version:  2.9
 Severity:  normal             |  Resolution:
 Keywords:  close needs-patch  |     Focuses:  docs
-------------------------------+-----------------------

Comment (by redsweater):

 Getting to the root of what I think the intended goal is of blocking
 XMLPRC completely, I wonder if a new filter that blocks all API access,
 whether it be via XMLRPC or REST, would be suitable? If I understand it
 correctly, this patch wouldn't block access to to many of the same
 functionalities XMLRPC exposes, after the WP REST API is integrated. Maybe
 a better "shut it all down" filter would express the intent that any such
 API should be blocked?

 In that case, FWIW, I would still recommend that a boilerplate error
 response be returned for every such "shut down" API interface.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36055#comment:30>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform