Remove the REST API and oEmbed links

Removes the REST API and oEmbed discovery links from the page head and the HTTP headers. The REST API itself keeps working.

Type PHP
Runs Everywhere (runs as WordPress loads)
Tested with WordPress 7.1

PHP

<?php

remove_action( 'wp_head', 'rest_output_link_wp_head', 10 );
remove_action( 'template_redirect', 'rest_output_link_header', 11 );
remove_action( 'wp_head', 'wp_oembed_add_discovery_links' );

Good to know

Other WordPress sites use the oEmbed links to show a preview card when someone pastes a link to your posts. Leave this off if you want those previews.

In these packs

Clean up the head: Remove the links, scripts and styles WordPress adds to every page that most sites never use.

Install it in one click

It's already in the Snipfire plugin's library. Enter your site's address and it opens there, ready to install. It arrives switched off, and Snipfire checks the code and test-loads your site before you switch it on.

Needs Snipfire on that site and you logged in as an administrator. Your address stays in this browser; we don't see it. Get Snipfire free

Or add it by hand

Click + New and choose PHP.
Paste the code and give it a name.
Where: Everywhere (runs as WordPress loads).
Save and switch it on.

Works in any snippet plugin, or a child theme's functions.php. Without the safety net, though.

Good to know

In these packs

More from this pack

Move your snippets over this afternoon.