node: warn for Object.prototype.__* accessors common in security warnings

lib/internal/bootstrap/pre_execution.js

@@ -3,10 +3,13 @@
 const {
   NumberParseInt,
   ObjectDefineProperty,
+  ObjectGetOwnPropertyDescriptor,
+  ObjectGetPrototypeOf,
   SafeMap,
   SafeWeakMap,
   StringPrototypeStartsWith,
   globalThis,
+  uncurryThis,
 } = primordials;
 
 const {
@@ -332,6 +335,61 @@ function initializeDeprecations() {
     enumerable: false,
     configurable: true
   });
+
+  let warnedForProto = false;
+  const ObjectPrototype = ObjectGetPrototypeOf({});
+  function warnOnProto() {
+    if (!warnedForProto) {
+      warnedForProto = true;
+      process.emitWarning('usage of Object.prototype.__* properties are a' +
+        ' common security concern, use static methods on Object instead');
+    }
+  }
+  const legacy = [
+    '__proto__',
+    '__defineGetter__',
+    '__defineSetter__',
+    '__lookupGetter__',
+    '__lookupSetter__',
+  ];
+  for (let i = 0; i < legacy.length; i++) {
+    const prop = legacy[i];
+    const protoDescriptor = ObjectGetOwnPropertyDescriptor(
+      ObjectPrototype,
+      prop);
+    if (protoDescriptor && 'value' in protoDescriptor) {
+      let value = protoDescriptor.value;
+      const writable = protoDescriptor.writable;
+      ObjectDefineProperty(ObjectPrototype, legacy[i], {
+        get() {
+          warnOnProto();
+          return value;
+        },
+        set(v) {
+          warnOnProto();
+          if (!writable) return;
+          value = v;
+        },
+        enumerable: false,
+        configurable: true
+      });
+    } else {
+      const getter = uncurryThis(protoDescriptor.get);
+      const setter = uncurryThis(protoDescriptor.set);
+      ObjectDefineProperty(ObjectPrototype, legacy[i], {
+        get() {
+          warnOnProto();
+          return getter(this);
+        },
+        set(value) {
+          warnOnProto();
+          setter(this, value);
+        },
+        enumerable: false,
+        configurable: true
+      });
+    }
+  }
 }
 
 function setupChildProcessIpcChannel() {

test/parallel/test-object-proto-accessor-warning.js

@@ -0,0 +1,11 @@
+'use strict';
+
+const common = require('../common');
+
+process.on('warning', common.mustCall());
+
+const obj = {};
+// eslint-disable-next-line
+const _ = obj.__proto__;
+// eslint-disable-next-line
+obj.__proto__ = null;