[leotm]

Summary:

Fix: #60002

This is the minimal fix, if preferred here or followup, can be refactored to preserve original style e.g.

const NON_SERIALIZABLE_PROTOTYPES: Array<interface {}> = [];

function isNonSerializableObject<T extends interface {}>(obj: T): boolean {
  let proto = Object.getPrototypeOf(obj);
  while (proto != null) {
    if (NON_SERIALIZABLE_PROTOTYPES.includes(proto)) return true;
    proto = Object.getPrototypeOf(proto);
  }
  return false;
}

function markClassAsNonSerializable<T>(cls: Class<T>): void {
  NON_SERIALIZABLE_PROTOTYPES.push(cls.prototype);
}

// Non-serializable built-ins.
markClassAsNonSerializable(WeakMap);
markClassAsNonSerializable(WeakSet);
markClassAsNonSerializable(Promise);

then naturally storing the Array instead as a Set or better WeakSet

Changelog:

[INTERNAL] [SECURITY] - Fix structuredClone WeakMap/WeakSet/Promise prototype mutations

Test Plan:

Added unit tests for WeakMap, WeakSet and Promise