fix(runtime): use more null proto objects (#23921)

This is a primordialization effort to improve resistance against users
tampering with the global `Object` prototype.

---------

Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/ext/web/13_message_port.js b/ext/web/13_message_port.js
index 93145e8f7..d94ca1382 100644
--- a/ext/web/13_message_port.js
+++ b/ext/web/13_message_port.js
@@ -150,7 +150,7 @@ class MessagePort extends EventTarget {
    * @param {any} message
    * @param {object[] | StructuredSerializeOptions} transferOrOptions
    */
-  postMessage(message, transferOrOptions = {}) {
+  postMessage(message, transferOrOptions = { __proto__: null }) {
     webidl.assertBranded(this, MessagePortPrototype);
     const prefix = "Failed to execute 'postMessage' on 'MessagePort'";
     webidl.requiredArguments(arguments.length, 1, prefix);