[wp-trac] [WordPress Trac] #39806: Disable REST API by default, making it opt-in rather than always-on

[WordPress Trac]

#39806: Disable REST API by default, making it opt-in rather than always-on
-------------------------+------------------------------
 Reporter:  mor10        |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  REST API     |     Version:  trunk
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:
-------------------------+------------------------------

Comment (by mor10):

 Replying to [comment:2 SergeyBiryukov]:
 > The current plan is to introduce more core functionality that relies on
 REST API.
 >
 > As noted in #38446, turning off the REST API is like turning off `admin-
 ajax.php` — both will break your site.

 IMO that's an argument to tie REST API availability to user roles or
 public/private demarcation line.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39806#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform