Files
ability_ability_runtime/frameworks/native/ability
RuiChen_01 434a65b3e4 fix(skill): blacklist Object.prototype member names as skill keys
napi_has_own_property does not catch toString/valueOf/etc. when the
ArkTS class instance already owns those names (injected by the Stage
model base class or by ArkTS compilation). Add an explicit blacklist of
Object.prototype member names plus __proto__ and the legacy dunder
accessors, and reject them in TryLoadSkillEntry and BuildSkillCallArgs
for both JsUIAbility and JsServiceExtension before the own-property
check.

Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

🤖‍ AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%]
Co-authored-by: claude (glm-5.2) <ai@local>
2026-06-21 17:14:26 +08:00
..
2026-05-23 16:24:30 +08:00