fix: ignores undici audit flag

OffchainLabs · Oct 17, 2023 · 1603c8d · 1603c8d
1 parent c98822e
commit 1603c8d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -112,6 +112,11 @@
     // from: @arbitrum/nitro-contracts>@openzeppelin/contracts-upgradeable
     // from @arbitrum/nitro-contracts>@openzeppelin/contracts
     // We don't use ERC2771Context
-    "GHSA-g4vp-m682-qqmp"
+    "GHSA-g4vp-m682-qqmp",
+    // https://github.com/advisories/GHSA-wqq4-5wpv-mx2g
+    // Undici's cookie header not cleared on cross-origin redirect in fetch
+    // from: hardhat>undici
+    // hardhat is only used in dev
+    "GHSA-wqq4-5wpv-mx2g"
   ]
 }