Some interesting JavaScript hacks are discussed on this page: http://dev.opera.com/articles/view/opera-javascript-for-hackers-1/ Example such as executing arbitrary code from a regex and using Unicode escaped function names, etc. This is certainly relevant in the context of Caja. Sandro