wpdev 336664473b fix(2meet-data-optimizer): keep registered fields out of the public listings REST endpoints ...

- show_in_rest defaulted to true, so GET /wpdo/v1/listings and /listings/{id} (public by design) returned every registered hot / cold field to anonymous visitors — e.g. infocards tmeetic_ig_access_token_enc / _token_expiry / _user_id and WooCommerce _purchase_note (confirmed on dev36)
- Fields are private unless registered with show_in_rest => true; protected (underscore) and credential-like keys (token, secret, password, api key, private key, credential, salt, nonce) are never exposed
- Zone A list path no longer returns whole rows when nothing is public, and filters / orderby accept public columns only
- Version 1.1.1; CHANGELOG, readme
- Verify: unit 690 (+3), integration 525 (+3 private-column tests, RED on 1.1.0), live suite rest 2/2 (RED on 1.1.0), all live 49/49, phpcs 0, stan OK

2026-09-26 22:22:40 +08:00

..

bench

perf(2meet-data-optimizer): route status and date ordering to entity tables

2026-09-26 01:41:07 +08:00

integration

fix(2meet-data-optimizer): keep registered fields out of the public listings REST endpoints

2026-09-26 22:22:40 +08:00

live

fix(2meet-data-optimizer): keep registered fields out of the public listings REST endpoints

2026-09-26 22:22:40 +08:00

unit

fix(2meet-data-optimizer): keep registered fields out of the public listings REST endpoints

2026-09-26 22:22:40 +08:00

bootstrap.php

fix(2meet-data-optimizer): serialize arrays in text fields instead of storing "Array"

2026-09-26 18:45:59 +08:00