YDA-5059: add hierarchical keyword selector

.gitignore

@@ -33,9 +33,7 @@ coverage.xml
 docs/_build/
 
 # Node modules
-/research/metadata-form/node_modules/
-/vault/metadata-form/node_modules/
-/deposit/metadata-form/node_modules/
+/metadata_form/src/node_modules/
 
 # Python Virtual Environment
 /venv/

app.py

@@ -248,7 +248,7 @@ def add_security_headers(response: Response) -> Response:
 
     # Content Security Policy (CSP)
     if request.endpoint in unsafe_eval_endpoints:
-        response.headers['Content-Security-Policy'] = "default-src 'self' data: *.githubusercontent.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.openstreetmap.org; frame-ancestors 'self'; form-action 'self'; object-src 'none'"  # noqa: E501
+        response.headers['Content-Security-Policy'] = "default-src 'self' data: *.githubusercontent.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; img-src 'self' data: *.openstreetmap.org; frame-ancestors 'self'; form-action 'self'; object-src 'none'"  # noqa: E501
     elif request.endpoint in form_action_endpoints:
         response.headers['Content-Security-Policy'] = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-ancestors 'self'; form-action 'self' https:; object-src 'none'"  # noqa: E501
     else: