Create normalizedHeaders as object with Object prototype. (#12054)

Co-authored-by: phryneas <[email protected]>

.changeset/polite-toys-battle.md

@@ -0,0 +1,5 @@
+---
+"@apollo/client": patch
+---
+
+Fixed a bug where incorrect object access in some Safari extensions could cause a crash.

.size-limits.json

@@ -1,4 +1,4 @@
 {
-  "dist/apollo-client.min.cjs": 40252,
-  "import { ApolloClient, InMemoryCache, HttpLink } from \"dist/index.js\" (production)": 33066
+  "dist/apollo-client.min.cjs": 40251,
+  "import { ApolloClient, InMemoryCache, HttpLink } from \"dist/index.js\" (production)": 33061
 }

src/link/http/selectHttpOptionsAndBody.ts

@@ -205,7 +205,7 @@ function removeDuplicateHeaders(
 ): typeof headers {
   // If we're not preserving the case, just remove duplicates w/ normalization.
   if (!preserveHeaderCase) {
-    const normalizedHeaders = Object.create(null);
+    const normalizedHeaders: Record<string, string> = {};
     Object.keys(Object(headers)).forEach((name) => {
       normalizedHeaders[name.toLowerCase()] = headers[name];
     });
@@ -216,15 +216,16 @@ function removeDuplicateHeaders(
   // preserving the original name.
   // This allows for non-http-spec-compliant servers that expect intentionally
   // capitalized header names (See #6741).
-  const headerData = Object.create(null);
+  const headerData: Record<string, { originalName: string; value: string }> =
+    {};
   Object.keys(Object(headers)).forEach((name) => {
     headerData[name.toLowerCase()] = {
       originalName: name,
       value: headers[name],
     };
   });
 
-  const normalizedHeaders = Object.create(null);
+  const normalizedHeaders: Record<string, string> = {};
   Object.keys(headerData).forEach((name) => {
     normalizedHeaders[headerData[name].originalName] = headerData[name].value;
   });