Wordpress Now Adding REST API and oEmbed Lines in the Header

[Samwise89]

When I was taking out emoji's (thanks Ryuzaki) I noticed that the new Wordpress is adding about 5 lines of REST API and oEmbed calls. This includes loading JSON files of each of your pages too.

I'm leaving Wordpress, but that's not feasible for this site that's already chugging along.

I tried to read about and understand what this was for, and apparently it's preemptive. It's not even being used yet. It's a way for apps to interact with your site, I believe.

Can anyone explain what this is going to be for?

I found code to remove it but I don't want to do it yet without knowing what it is I'm effecting.

And do the oEmbed lines need to be there to embed YouTube videos? Or can they be removed too?

 

[CCarter]

This can only end badly... People can barely secure their wordpress, if they allow REST APIs access turned on by default, lord have mercy. I have to look into this a lot more, but just thinking about the potential security risks, my brain hurts.