Display the client logo with a referrerpolicy set to "no-referrer"

Fixes #1768

frontend/src/components/Session/ClientAvatar.tsx

@@ -33,6 +33,7 @@ const ClientAvatar: React.FC<{
         className={styles.avatar}
         src={logoUri}
         alt={name}
+        referrerPolicy="no-referrer"
         style={
           {
             "--mas-avatar-size": size,

frontend/src/components/Session/__snapshots__/ClientAvatar.test.tsx.snap

@@ -5,6 +5,7 @@ exports[`<ClientAvatar /> > renders client logo 1`] = `
   <img
     alt="Test Client"
     class="_avatar_39aee3"
+    referrerpolicy="no-referrer"
     src="https://www.testclient.com/logo.png"
     style="--mas-avatar-size: 10px;"
   />

templates/pages/consent.html

@@ -22,9 +22,7 @@ limitations under the License.
     <div class="w-96 mx-2 my-8 flex flex-col gap-6">
       <div class="flex flex-col gap-2 text-center">
         {% if client.logo_uri %}
-          <div class="consent-client-icon image">
-            <img src="{{ client.logo_uri }}" />
-          </div>
+          <img class="consent-client-icon image" referrerpolicy="no-referrer" src="{{ client.logo_uri }}" />
         {% else %}
           <div class="consent-client-icon generic">
             {{ icon::web_browser() }}

templates/pages/policy_violation.html

@@ -25,7 +25,7 @@ limitations under the License.
         <div class="rounded-lg bg-grey-25 dark:bg-grey-450 p-2 flex items-center">
           <div class="bg-white rounded w-16 h-16 overflow-hidden mx-auto">
             {% if client.logo_uri %}
-            <img crossorigin="anonymous" class="w-16 h-16" src="{{ client.logo_uri }}" />
+              <img referrerpolicy="no-referrer" class="w-16 h-16" src="{{ client.logo_uri }}" />
             {% endif %}
           </div>
           <h1 class="text-lg text-center font-medium flex-1"><a target="_blank" href="{{ client.client_uri }}" class="cpd-link" data-kind="primary">{{ client.client_name | default(value=client.client_id) }}</a></h1>

templates/pages/sso.html

@@ -22,9 +22,7 @@ limitations under the License.
     <div class="w-96 mx-2 my-8 flex flex-col gap-6">
       <div class="flex flex-col gap-2 text-center">
         {% if client.logo_uri %}
-          <div class="consent-client-icon image">
-            <img src="{{ client.logo_uri }}" />
-          </div>
+          <img class="consent-client-icon image" referrerpolicy="no-referrer" src="{{ client.logo_uri }}" />
         {% else %}
           <div class="consent-client-icon generic">
             {{ icon::web_browser() }}