Plugin no longer removing link tags after upgrade to 4.7.1

Could you provide an example? If the problem is on a public page, provide a URL. If it’s a private site or the problem requires a login, could you share a screenshot?

Phil,

https://www.historyandheadlines.com/

Can I assume that you’re referring to the ‘pingback’ and ‘EditURI’ headers?

The plugin utilizes the xmlrpc_enabled filter (https://developer.www.ads-software.com/reference/hooks/xmlrpc_enabled/) which disables XML-RPC methods that require authentication. It does not control pingbacks or other custom endpoints that don’t require authentication.

As such, that filter (which is a part of WordPress Core and was introduced in WordPress 3.5) has never removed those headers.

Are there other XML-RPC or security plugins that you’re using that may have removed those headers prior to WordPress 4.7.1?

Yes, referring to pingback link tags. What’s the most effective way of removing these headers then?

Okay, I figured out to do this via another plugin. Please close/delete this issue as invalid, thanks!

Just to add it here as a reference, there are two things to do to remove those headers:

1) Disable pingbacks and trackbacks in the WordPress Dashboard under Settings > Discussion. This will remove the pingback header.

2) Add the following line of code to your theme’s functions.php file or a custom plugin. This will remove the EditURI header:

remove_action ('wp_head', 'rsd_link');