RuiChen_01 434a65b3e4 fix(skill): blacklist Object.prototype member names as skill keys
napi_has_own_property does not catch toString/valueOf/etc. when the
ArkTS class instance already owns those names (injected by the Stage
model base class or by ArkTS compilation). Add an explicit blacklist of
Object.prototype member names plus __proto__ and the legacy dunder
accessors, and reject them in TryLoadSkillEntry and BuildSkillCallArgs
for both JsUIAbility and JsServiceExtension before the own-property
check.

Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

🤖‍ AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%]
Co-authored-by: claude (glm-5.2) <ai@local>
2026-06-21 17:14:26 +08:00
2022-07-05 17:15:19 +08:00
2026-06-02 15:57:20 +08:00
2026-05-30 14:17:16 +08:00
2021-06-02 02:20:34 +08:00
2026-05-29 14:32:27 +08:00
2021-06-02 02:20:34 +08:00
2026-05-28 20:22:51 +08:00
2026-03-21 21:40:43 +08:00
2025-10-14 12:48:30 +08:00
2022-06-30 15:32:07 +08:00
2026-03-04 11:03:50 +08:00
2024-06-07 10:32:48 +08:00
S
Description
暂无描述
146 MiB
Languages
C++ 98.1%
C 1.5%
JavaScript 0.2%
TypeScript 0.1%