Looking throught the list of http://www.jsfuck.com http://www.jsfuck.com a lot of the 'basics' can be created in your environment too. For example a string can

Looking throught the list of http://www.jsfuck.com http://www.jsfuck.com a lot of the 'basics' can be created in your environment too. For example a string can be created like this: (x=>0)+0 If arbitrary code can be constructed in your environment ... hard to say. But as jaybosamiya has shown, it is at least possible to escape your error handling.