Merge pull request #9442 from NuGet/dev

[ReleasePre][2023.03.28]FI of dev into main

Author: lyndaidaii

src/Bootstrap/dist/css/bootstrap-theme.css

@@ -369,6 +369,7 @@ img.reserved-indicator-icon {
     }
 
     li.package-tags {
+      display: block;
       overflow-y: visible;
     }
   }

src/Bootstrap/less/theme/base.less

@@ -80,6 +80,8 @@
 .frameworktableinfo-asset-icon{
   .frameworktableinfo;
   background-color: @badge-dark;
+  justify-content: center;
+  display: inline-block;
 }
 
 .frameworktableinfo-text {

src/Bootstrap/less/theme/common-supported-frameworks.less

@@ -102,6 +102,7 @@ protected override void AttachToOwinApp(IGalleryConfigurationService config, IAp
                 PostLogoutRedirectUri = siteRoot,
                 Scope = OpenIdConnectScope.OpenIdProfile + " email",
                 ResponseType = OpenIdConnectResponseType.IdToken,
+                // CodeQL [SM03926] We do not restrict issuers to a limited set of tenants for our multi-tenant app
                 TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters() { ValidateIssuer = false },
                 Notifications = new OpenIdConnectAuthenticationNotifications
                 {

src/NuGetGallery.Services/Authentication/Providers/AzureActiveDirectoryV2/AzureActiveDirectoryV2Authenticator.cs

@@ -34,6 +34,7 @@
         "sonarcloud.io",
         "travis-ci.com",
         "travis-ci.org",
+        "avatars.githubusercontent.com",
         "raw.github.com",
         "raw.githubusercontent.com",
         "user-images.githubusercontent.com",