B blog.portswigger.net Executing non-alphanumeric JavaScript without parentheses 123 points kkl 10 years ago 19 comments