Potential prototype pollution vulnerability in the DisplayLayoutToolbar plugin

[akhenry]

Originally reported by @RinZ27 (thanks!)

Summary

Potential prototype pollution vulnerability in the DisplayLayoutToolbar plugin. The #getPropertyFromPath method is traversing object paths without validating keys, which could allow sensitive properties like proto or constructor to be accessed.

No potential for prototype pollution has been identified.

Impact Check List

• Data loss or misrepresented data?
• Regression? Did this used to work or has it always been broken?
• Is there a workaround available?
• Does this impact a critical component?
• Is this just a visual bug with no functional impact?
• Does this block the execution of e2e tests?
• Does this have an impact on Performance?

[akhenry]

Testing notes

1. No functional change. Just perform some general regression testing of the Display Layout toolbar.