OpenPanel js-runtime Sandbox Escape Vulnerability

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator.

The validator fails to block computed member access to constructor chains, allowing attackers to reach the Function constructor.

• Affected versions: OpenPanel js-runtime through commit bad75bdd.
• Precondition: attacker has project write access.
• Impact: arbitrary code execution in the worker process.