White-label layer: no WordPress or vendor branding visible anywhere
Imported from GitHub issue El-SaMa/lamoi-waas#7 by @El-SaMa.
Goal
A client (or their visitor) never sees WordPress, Astra, WoodMart, plugin or vendor names. mu-plugin lamoi-brand in this repo.
Tasks
- Front end: remove generator meta, version query strings,
wp-embed, emoji scripts, RSD/WLW links, REST discovery link in head, plugin HTML comments (SEO plugins etc.), feeds' generator tag. - Block
readme.html,license.txt,wp-config-sample.php, plugin and theme readme/changelog files at the web server. - Asset paths: forked themes and plugins renamed (folder, text domain, handles) so URLs show
lamoi-*names (#10, #11, #13). - Login: branded
wp-login.php(logo, colours, link to lamoi.fi, wording fi/en), custom login URL optional. - Admin: admin bar, footer text, "Howdy", dashboard widgets, help tabs, Site Health, update nags, plugin and theme names in menus replaced or hidden for non-super-admins.
- Emails: from name and address, templates (new user, password reset, Woo order emails' footers) branded.
- Error and maintenance pages: Lamoi-branded (reuse the OMA server-pages work).
-
/wp-json/index: hide namespaces from anonymous users where safe (keep what themes and blocks need).
Acceptance criteria
-
infra/checks/fingerprint.sh: crawls a sample subsite (front, login, a 404, feed, a Woo shop page) and greps forwp-contentvendor folder names, "WordPress", "Astra", "WoodMart", known plugin names; must find none outside allowed paths. Runs in CI against staging.
Depends on
#4.
Plan key W7. Epic: El-SaMa/lamoi-waas#25.