RuiChen_01 434a65b3e4 fix(skill): blacklist Object.prototype member names as skill keys ...

napi_has_own_property does not catch toString/valueOf/etc. when the
ArkTS class instance already owns those names (injected by the Stage
model base class or by ArkTS compilation). Add an explicit blacklist of
Object.prototype member names plus __proto__ and the legacy dunder
accessors, and reject them in TryLoadSkillEntry and BuildSkillCallArgs
for both JsUIAbility and JsServiceExtension before the own-property
check.

Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

🤖‍ AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%]
Co-authored-by: claude (glm-5.2) <ai@local>

2026-06-21 17:14:26 +08:00

..

c/ability_runtime

ModObjDispatcher: add StructCreate metadata validation, missing error logs, and nested TDD tests

2026-05-18 20:12:44 +08:00

cj

新增abilityV2接口

2026-05-25 10:53:36 +08:00

ets

!18826 merge complete_InteropAbilityLifecycleCallback into master

2026-05-28 15:26:59 +08:00

js/napi

!19337 merge hiview into master

2026-05-18 12:23:19 +08:00

native

fix(skill): blacklist Object.prototype member names as skill keys

2026-06-21 17:14:26 +08:00

simulator

!18809 merge master into master

2026-04-08 11:55:55 +08:00