禁用 REST API、移除 wp-json 链接的方法是把以下代码添加到主题 functions.php 文件中即可:

add_filter(‘rest_enabled’, ‘_return_false’);
 add_filter(‘rest_jsonp_enabled’, ‘_return_false’);
 remove_action( ‘wp_head’, ‘rest_output_link_wp_head’, 10 );
 remove_action( ‘wp_head’, ‘wp_oembed_add_discovery_links’, 10 );

禁用 embeds 的话 wordpress 官方开发了一个插件：Disable Embeds；如果不想使用插件，就把插件代码复制到主题的 functions.php 文件中即可。

function disable_embeds_init() {
 /* @var WP $wp */
 global $wp;
 // Remove the embed query var.
 $wp->public_query_vars = array_diff( $wp->public_query_vars, array(
 ’embed’,
 ) );
 // Remove the REST API endpoint.
 remove_action( ‘rest_api_init’, ‘wp_oembed_register_route’ );
 // Turn off
 add_filter( ’embed_oembed_discover’, ‘__return_false’ );
 // Don’t filter oEmbed results.
 remove_filter( ‘oembed_dataparse’, ‘wp_filter_oembed_result’, 10 );
 // Remove oEmbed discovery links.
 remove_action( ‘wp_head’, ‘wp_oembed_add_discovery_links’ );
 // Remove oEmbed-specific JavaScript from the front-end and back-end.
 remove_action( ‘wp_head’, ‘wp_oembed_add_host_js’ );
 add_filter( ‘tiny_mce_plugins’, ‘disable_embeds_tiny_mce_plugin’ );
 // Remove all embeds rewrite rules.
 add_filter( ‘rewrite_rules_array’, ‘disable_embeds_rewrites’ );
 }
 add_action( ‘init’, ‘disable_embeds_init’, 9999 );
 /**
 * Removes the ‘wpembed’ TinyMCE plugin.
 *
 * @since 1.0.0
 *
 * @param array $plugins List of TinyMCE plugins.
 * @return array The modified list.
 */
 function disable_embeds_tiny_mce_plugin( $plugins ) {
 return array_diff( $plugins, array( ‘wpembed’ ) );
 }
 /**
 * Remove all rewrite rules related to embeds.
 *
 * @since 1.2.0
 *
 * @param array $rules WordPress rewrite rules.
 * @return array Rewrite rules without embeds rules.
 */
 function disable_embeds_rewrites( $rules ) {
 foreach ( $rules as $rule => $rewrite ) {
 if ( false !== strpos( $rewrite, ’embed=true’ ) ) {
 unset( $rules[ $rule ] );
 }
 }
 return $rules;
 }
 /**
 * Remove embeds rewrite rules on plugin activation.
 *
 * @since 1.2.0
 */
 function disable_embeds_remove_rewrite_rules() {
 add_filter( ‘rewrite_rules_array’, ‘disable_embeds_rewrites’ );
 flush_rewrite_rules();
 }
 register_activation_hook( __FILE__, ‘disable_embeds_remove_rewrite_rules’ );
 /**
 * Flush rewrite rules on plugin deactivation.
 *
 * @since 1.2.0
 */
 function disable_embeds_flush_rewrite_rules() {
 remove_filter( ‘rewrite_rules_array’, ‘disable_embeds_rewrites’ );
 flush_rewrite_rules();
 }
 register_deactivation_hook( __FILE__, ‘disable_embeds_flush_rewrite_rules’ );

这几样东西对于我们发文章来说没啥用处，还在 head 那里存在增加了网站打开时间，干脆就屏蔽掉，也可以让 https 更完整。