Exposing Custom Post Type Meta for Only a Single API Endpoint

I ran into an undocumented and unexpected problem when registering custom post type meta fields for the REST API. register_meta() exposes meta fields in all REST API endpoints, which can lead to privacy leaks. To avoid that, it can be called conditionally.

Accessing Post Meta and More Via $post->meta_key

It turns out there's a much better way to fetch post meta than get_post_meta( $post->ID, 'foo', true ): $post->foo.

Ian Dunn

WordPress Developer

Tag Archives: Post Meta

Exposing Custom Post Type Meta for Only a Single API Endpoint

Accessing Post Meta and More Via $post->meta_key