fix(reactivity): fix __proto__ access on proxy objects (#1133)

diff --git a/packages/reactivity/src/baseHandlers.ts b/packages/reactivity/src/baseHandlers.ts
index 40475386bf9e50719093eb86ef98cce9add25599..5bebe564016b1cc3d32952ba164f93ebf3dbb6de 100644 (file)
--- a/packages/reactivity/src/baseHandlers.ts
+++ b/packages/reactivity/src/baseHandlers.ts
@@ -39,7 +39,7 @@ function createGetter(isReadonly = false, shallow = false) {
       return !isReadonly
     } else if (key === ReactiveFlags.isReadonly) {
       return isReadonly
-    } else if (key === ReactiveFlags.raw || key === '__proto__') {
+    } else if (key === ReactiveFlags.raw) {
       return target
     }
 
@@ -49,7 +49,7 @@ function createGetter(isReadonly = false, shallow = false) {
     }
     const res = Reflect.get(target, key, receiver)
 
-    if (isSymbol(key) && builtInSymbols.has(key)) {
+    if (isSymbol(key) && builtInSymbols.has(key) || key === '__proto__') {
       return res
     }