Merge pull request #9442 from NuGet/dev

[ReleasePre][2023.03.28]FI of dev into main
NuGet · Mar 28, 2023 · 3f644cb · 3f644cb
2 parents f183304 + 659510b
commit 3f644cb
Show file tree

Hide file tree

Showing 18 changed files with 22,326 additions and 7,534 deletions.
diff --git a/src/Bootstrap/dist/css/bootstrap-theme.css b/src/Bootstrap/dist/css/bootstrap-theme.css
diff --git a/src/Bootstrap/less/theme/base.less b/src/Bootstrap/less/theme/base.less
@@ -369,6 +369,7 @@ img.reserved-indicator-icon {
     }
 
     li.package-tags {
+      display: block;
       overflow-y: visible;
     }
   }

diff --git a/src/Bootstrap/less/theme/common-supported-frameworks.less b/src/Bootstrap/less/theme/common-supported-frameworks.less
@@ -80,6 +80,8 @@
 .frameworktableinfo-asset-icon{
   .frameworktableinfo;
   background-color: @badge-dark;
+  justify-content: center;
+  display: inline-block;
 }
 
 .frameworktableinfo-text {

diff --git a/...es/Authentication/Providers/AzureActiveDirectoryV2/AzureActiveDirectoryV2Authenticator.cs b/...es/Authentication/Providers/AzureActiveDirectoryV2/AzureActiveDirectoryV2Authenticator.cs
@@ -102,6 +102,7 @@ protected override void AttachToOwinApp(IGalleryConfigurationService config, IAp
                 PostLogoutRedirectUri = siteRoot,
                 Scope = OpenIdConnectScope.OpenIdProfile + " email",
                 ResponseType = OpenIdConnectResponseType.IdToken,
+                // CodeQL [SM03926] We do not restrict issuers to a limited set of tenants for our multi-tenant app
                 TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters() { ValidateIssuer = false },
                 Notifications = new OpenIdConnectAuthenticationNotifications
                 {

diff --git a/src/NuGetGallery/App_Data/Files/Content/Trusted-Image-Domains.json b/src/NuGetGallery/App_Data/Files/Content/Trusted-Image-Domains.json
@@ -34,6 +34,7 @@
         "sonarcloud.io",
         "travis-ci.com",
         "travis-ci.org",
+        "avatars.githubusercontent.com",
         "raw.github.com",
         "raw.githubusercontent.com",
         "user-images.githubusercontent.com",