Issue 1:

Issue 2:
In #10939 we landed primordials into deno_core. They are frozen intrinsics that are not vulnerable to prototype pollution. We now need to undergo the tedious task to refactor all of our JS code to use these primordials. Here is the TODO list:

extensions/webidl/00_webidl.js (@lucacasonato) #11227

extensions/web/00_infra.js (@lucacasonato) #11228

extensions/web/01_dom_exception.js (@lucacasonato) #11228

extensions/web/01_mimesniff.js (@lucacasonato) #11228

extensions/web/02_event.js (@bartlomieju) #11264

extensions/web/02_structured_clone.js (@lucacasonato) #11273

extensions/web/03_abort_signal.js (@lucacasonato) #11273

extensions/web/04_global_interfaces.js (@lucacasonato) #11273

extensions/web/05_base64.js (@lucacasonato) #11273

extensions/web/06_streams.js (@lucacasonato) #11251

extensions/web/08_text_encoding.js (@lucacasonato) #11273

extensions/web/09_file.js (@lucacasonato) #11299

extensions/web/10_filereader.js (@lucacasonato) #11299

extensions/web/11_blob_url.js (@lucacasonato) #11299

extensions/web/12_location.js (@lucacasonato) #11273

extensions/broadcast_channel/01_broadcast_channel.js (@littledivy) #11231

extensions/console/01_colors.js (@littledivy) #11249

extensions/console/02_console.js (@littledivy) #11249

extensions/crypto/00_webidl.js (@littledivy) #11229

extensions/crypto/01_crypto.js (@littledivy) #11229

extensions/fetch/01_fetch_util.js (@satyarohith) #11266

extensions/fetch/20_headers.js (@satyarohith) #11266

extensions/fetch/21_formdata.js (@satyarohith) #11266

extensions/fetch/22_body.js (@satyarohith) #11266

extensions/fetch/22_http_client.js (@satyarohith) #11266

extensions/fetch/23_request.js (@satyarohith) #11266

extensions/fetch/23_response.js (@satyarohith) #11266

extensions/fetch/26_fetch.js (@satyarohith) #11266

extensions/net/01_net.js (@bartlomieju) #11243

extensions/net/02_tls.js (@bartlomieju) #11243

extensions/net/03_http.js (@bartlomieju) #11243

extensions/net/04_net_unstable.js (@bartlomieju) #11243

extensions/timers/01_timers.js (@SimonRask) #11256

extensions/timers/02_performance.js (@SimonRask) #11256

extensions/url/00_url.js (@lucacasonato) #11225

extensions/webgpu/01_webgpu.js (@bartlomieju) #11265

extensions/webgpu/02_idl_types.js (@bartlomieju) #11265

extensions/websocket/01_websocket.js (@littledivy) #11240

extensions/webstorage/01_webstorage.js (@littledivy) #11239

runtime/js/01_build.js (@bartlomieju) #11241

runtime/js/01_errors.js (@bartlomieju) #11241

runtime/js/01_version.js (@bartlomieju) #11241

runtime/js/01_web_util.js (@bartlomieju) #11241

runtime/js/06_util.js (@bartlomieju) #11241

runtime/js/11_workers.js (@bartlomieju) #11241

runtime/js/12_io.js (@bartlomieju) #11241

runtime/js/13_buffer.js (@SimonRask) #11247

runtime/js/30_fs.js (@SimonRask) #11247

runtime/js/30_metrics.js (@SimonRask)

runtime/js/30_os.js (@bartlomieju) #11248

runtime/js/40_compiler_api.js (@bartlomieju) #11248

runtime/js/40_diagnostics.js (@bartlomieju) #11248

runtime/js/40_error_stack.js (@bartlomieju) #11248

runtime/js/40_files.js (@bartlomieju) #11248

runtime/js/40_fs_events.js (@bartlomieju) #11248

runtime/js/40_permissions.js (@bartlomieju) #11248

runtime/js/40_plugins.js (@bartlomieju) #11248

runtime/js/40_process.js (@bartlomieju) #11248

runtime/js/40_read_file.js (@bartlomieju) #11248

runtime/js/40_signals.js (@bartlomieju) #11248

runtime/js/40_testing.js (@bartlomieju) #11248

runtime/js/40_tty.js (@bartlomieju) #11248

runtime/js/40_write_file.js (@bartlomieju) #11248

runtime/js/41_prompt.js (@bartlomieju) #11248

runtime/js/90_deno_ns.js (@bartlomieju) #11248

runtime/js/99_main.js (@bartlomieju) #11248

All the snippets of code that are executed from rust via deno_core / deno_runtime / deno at runtime

I will open some first PRs shortly that show how a migration of a file to primordials should look.

If you want to convert some files, please comment on this issue before starting so we don't duplicate work.