vfs: give ZipProvider option bags a null prototype

The options passed to `createFileStats()` and to the archive's `add()`
and `addSync()` are plain literals, so a property added to
`Object.prototype` would reach those callees as if it had been passed
on purpose. Create them with a null prototype so only the fields set
here are visible.

Refs: #65853
Signed-off-by: Philipp Dunkel <pip@pipobscure.com>
PR-URL: #65853
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

Author: pipobscure

lib/internal/vfs/providers/ziparchive.js

@@ -219,6 +219,7 @@ class ZipFileHandle extends VirtualFileHandle {
   // its own modification time; once dirty the file is as new as its close.
   #doStat() {
     return createFileStats(this.#size, {
+      __proto__: null,
       mode: this.#entryMode,
       mtimeMs: this.#dirty || this.#modified === null ? undefined : this.#modified.getTime(),
     });
@@ -249,13 +250,15 @@ class ZipFileHandle extends VirtualFileHandle {
 
   async close() {
     if (this.#dirty && isWritableFlag(this.flags)) {
-      await this.#source.add(this.#name, this.#buffer.subarray(0, this.#size), { mode: this.#entryMode });
+      await this.#source.add(this.#name, this.#buffer.subarray(0, this.#size),
+                             { __proto__: null, mode: this.#entryMode });
     }
     await super.close();
   }
   closeSync() {
     if (this.#dirty && isWritableFlag(this.flags)) {
-      this.#source.addSync(this.#name, this.#buffer.subarray(0, this.#size), { mode: this.#entryMode });
+      this.#source.addSync(this.#name, this.#buffer.subarray(0, this.#size),
+                           { __proto__: null, mode: this.#entryMode });
     }
     super.closeSync();
   }