Hummingbird Outputting Admin URL in Code

Hi there,

So I have a custom WP admin URL for security reasons, which should, in theory, be undiscoverable.

However, a recent brute-force attempt made me re-look at my site’s output HTML. It seems Hummingbird outputs the admin-ajax URL in publicly-viewable source code:

<script type="text/javascript" id="wphb-global-js-extra">
/* <![CDATA[ */
var wphbGlobal = {"ajaxurl":"https:\/\/fibrojedi.me.uk\/adminurl\/admin-ajax.php","nonce":"b1ebeb0670"};
/* ]]> */
</script>

Please could you consider obfuscating this URL or processing this differently so that admin URL cannot be discovered this way?

Thanks,

FJ