PT-2026-41502

Summary icu-minify's runtime formatter resolves select branches by looking up the runtime value as a plain property on a prototype-bearing object. When the value coerces to a key that exists on Object.prototype e.g. toString, proto , constructor, hasOwnProperty, valueOf, the lookup returns a trut...