chore: perf optimization

Author: patriksimek

lib/bridge.js

@@ -1097,15 +1097,17 @@ function createBridge(otherInit, registerProxy) {
 				if (!isHost && isDangerousFunctionConstructor(other)) {
 					return emptyFrozenObject;
 				}
+				// Cache check first — if already proxied, return existing proxy.
+				// Safe because: cached proxies were created under the same preventUnwrap
+				// rules, and an attacker can't retroactively add Function constructors
+				// to a host object's properties from the sandbox (chicken-and-egg).
+				const mapped = thisReflectApply(thisWeakMapGet, mappingOtherToThis, [other]);
+				if (mapped) return mapped;
 				// For objects on sandbox side, check for nested dangerous constructors.
 				// If found, proxy WITHOUT unwrap registration (mappingThisToOther), so
 				// the proxy cannot be unwrapped when passed back to host functions.
 				// The proxy's get trap already sanitizes dangerous values on read.
 				const dangerous = !isHost && containsDangerousConstructor(other);
-				if (!dangerous) {
-					const mapped = thisReflectApply(thisWeakMapGet, mappingOtherToThis, [other]);
-					if (mapped) return mapped;
-				}
 				if (proto) {
 					return thisProxyOther(factory, other, proto, dangerous);
 				}