---
id: 5495
title: "JavaScript without parentheses using DOMMatrix"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/javascript-without-parentheses-using-dommatrix"
published_at: "2020-09-08T10:00:00Z"
tags: ["xss", "portswigger", "javascript", "waf-bypass", "payload", "dommatrix", "limited-charset"]
phying_url: "https://phying.com/item/5495"
lang: en
---

# JavaScript without parentheses using DOMMatrix

## Summary

Gareth Heyes shows how to execute JavaScript without parentheses by abusing the DOMMatrix constructor to generate otherwise-forbidden characters, solving a limited-charset XSS challenge.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2020-09-08T10:00:00Z
- **Original:** https://portswigger.net/research/javascript-without-parentheses-using-dommatrix
- **Phying News:** https://phying.com/item/5495