Here's something I didn't know - you can use unicode escapes outside of strings. Code like `\u0061\u006c\u0065\u0072\u0074(1)` translates to `alert(1)` and runs just fine.