refactor: camera ready

lnbits/__init__.py

@@ -3,6 +3,8 @@ import importlib
 from flask import Flask
 from flask_assets import Environment, Bundle
 from flask_compress import Compress
+from flask_limiter import Limiter
+from flask_limiter.util import get_remote_address
 from flask_talisman import Talisman
 from os import getenv
 
@@ -19,6 +21,7 @@ valid_extensions = [ext for ext in ExtensionManager().extensions if ext.is_valid
 # -----------------------
 
 Compress(app)
+Limiter(app, key_func=get_remote_address, default_limits=["1 per second"])
 Talisman(
     app,
     force_https=getenv("LNBITS_WITH_ONION", 0) == 0,
@@ -27,6 +30,7 @@ Talisman(
             "'self'",
             "'unsafe-eval'",
             "'unsafe-inline'",
+            "blob:",
             "cdnjs.cloudflare.com",
             "code.ionicframework.com",
             "code.jquery.com",
@@ -78,5 +82,5 @@ def init():
     init_databases()
 
 
-if __name__ == '__main__':
+if __name__ == "__main__":
     app.run()